Bash (Bourne Again SHell)

Bashka is a command-line safety guard for the `curl ... | bash` installation pattern. It parses incoming shell scripts, scores them against checks for credential theft, data exfiltration, reverse shells, destructive commands, insecure downloads, persistence, obfuscation, and other hazards, and can follow forwarded or nested scripts so each layer is reviewed before execution. It can also provide the script for manual or AI-assisted analysis. Bashka records software installed through it in an installation registry, including detected binaries and created directories. Its commands can list and inspect recorded packages, rerun their installers, and remove tracked files. It supports configuration for review behavior, remote-script following, recursion depth, command limits, trusted domains, and interface style. The project is open source under the MIT license and is distributed as a shell-installed or prebuilt binary, including through Homebrew, Cargo, mise, and GitHub releases. Its documentation notes that static analysis cannot reliably detect every behavior in a Turing-complete shell script, that direct paths such as `/bin/bash` bypass its PATH shim, and that the registry cannot manage files whose installation locations it cannot detect.

Shell Gym is an interactive Linux command-line trainer implemented as a background daemon with a built-in web UI. It presents short assignments, or “reps,” such as entering a directory, creating a file, killing a process, or freeing a port; the assignment completes automatically when the corresponding system state changes. Users type real commands in an ordinary terminal while the UI observes the host and provides guidance, without modifying the shell or using prompt hooks, wrappers, special functions, a check button, or copy-and-paste. Its outside-the-shell observation uses procfs to discover interactive shells and inspect working directories, processes, files, and ports; the Linux kernel proc connector to observe exec() events; and direct state checks for files, processes, and listening ports. It runs on a Linux host as root, with an online playground also available, and the project advises using a disposable VM or other disposable Linux system because exercises perform real actions on the live host.

An open-source reconstruction of the historically lost B programming-language compiler, developed by Angelo Papenhoff. Its B implementation uses two phases: `bc.b` compiles B source into an intermediate format, and `ba.b` converts that format into assembly; the first phase is mostly platform-independent apart from word size, while the second is platform-dependent. The repository also contains an initial C compiler used to bootstrap the B compiler, capable of producing PDP-11, amd64, MIPS32, and RISC-V 64 assembly, plus reconstructed variants for UNIX v1 on the PDP-11 and ITS on the PDP-10. The compilers generate the original threaded code, with the PDP-10 version using ASCII intermediate code. The project has been confirmed to compile itself on Linux amd64, Linux MIPS32, Linux RISC-V 64, 2.11BSD PDP-11, UNIX v1 PDP-11, and ITS PDP-10.

BAML is a language and runtime for defining structured model interfaces and connecting agents to application code. It can repair malformed JSON outputs and was used with GPT OSS120B to find comments mentioning sponsors.

OpenShell is an open-source runtime from NVIDIA for running fleets of autonomous AI agents in isolated sandboxes. It lets agents read files, install packages, call APIs, and use credentials while enforcing declared filesystem, process, and network policies. Each agent runs in a sandbox where kernel-level controls govern file access, system calls, and network connections. OpenShell also uses formal verification to review policy changes before approval, flagging newly permitted access such as connections to additional hosts with credentials or calls to new API methods. Credentials are withheld from agents and added only to requests bound for approved endpoints. The project provides a CLI, local gateway, sandbox lifecycle management, policy tooling, inference-provider routing, Kubernetes deployment, extensibility APIs, and Python, TypeScript, Go, and Rust SDKs. OpenShell supports Linux, macOS on Apple Silicon, and experimentally Windows through WSL 2, with Docker, Podman, or host virtualization. It is licensed under the Apache License 2.0 and collects configurable anonymous operational telemetry.