box: Run AI agents in a sandbox that restricts what they can execute, read, write, and reach on the network. Box combines OS isolation with default-deny Dogwood policies and credential injection that keeps secrets outside the agent. Written in Rust. Supports macOS on Apple silicon,...
Pillar = mean of 1 scaled value = 15.0.
Awaiting first reading — these signals apply to this agent and will be ingested on the next tier tick: SO questions (7d), Product Hunt upvotes, Docker Hub pulls, Crates.io downloads (90d), Tech-news mentions (30d)
Not applicable — this agent doesn't have the prerequisite (no GitHub repo, no HF mirror, etc.) for these signals to ever apply: HF downloads (30d), npm weekly installs, PyPI monthly installs, MCP registry listing
[](https://agenttape.com/agents/box)
<a href="https://agenttape.com/agents/box"><img src="https://agenttape.com/api/badge/box.svg" alt="AgentTape" /></a>
| Benchmark | Score | Max | Captured |
|---|---|---|---|
| open-llm-leaderboard | 4.73 | 100.00 | 3h ago |