Stroq

Strix is an open-source AI penetration-testing tool from usestrix that uses autonomous, multi-agent AI pentesters to dynamically run applications, perform reconnaissance and exploitation, and validate vulnerabilities with working proof-of-concept exploits rather than static-analysis findings. Its developer-oriented CLI produces remediation guidance, generated patches, and pentest reports, and it can run scans in CI/CD pipelines to detect insecure changes before deployment. The tool runs in a Docker sandbox and requires an LLM API key; the associated Strix platform supports repository and domain testing, continuous scanning, and integrations with development and issue-tracking workflows.

Strands Box is an open-source sandbox engine for running AI agents. Written in Rust, it combines operating-system isolation with Dogwood semantic policies: direct file, program, and network access is configured in box.toml, while operations handled through Strands Shell, Monty for Python, the egress gateway, and the MCP broker are evaluated by an embedded Dogwood Local Engine. Operations are denied by default unless a permit rule allows them, and forbid rules override permits; rules can inspect arguments, earlier actions, and elapsed time, allowing activity in one interpreter or tool path to affect later requests. Box also supports credential injection for permitted requests, keeping configured API credentials or AWS SigV4 signing secrets outside the agent, and records policy decisions as OTLP JSON. The repository describes the current preview as local execution on macOS with Apple silicon, with Linux support planned, and distributes the project under the Apache License 2.0.

clawk is an open-source command-line tool that runs AI coding agents in disposable Linux virtual machines instead of directly on the host. It mounts a repository from the host into the guest, keeps host files and keychains outside the VM, forwards the host's SSH agent, and restricts outbound connections with a per-sandbox network allowlist. It supports agents and shells including Claude Code, Codex, pi, and a standard shell; sandboxes can be destroyed and recreated while host-side code and agent conversations remain available, and sessions can be resumed. The repository describes the project as pre-1.0 and subject to breaking changes; allowed destinations and forwarded credentials remain accessible to the agent and can be used to publish data.

pstack-claude is an MIT-licensed port of Lauren Tan’s pstack agent workflow stack for Claude Code, Codex, Pi, OpenCode, Gemini CLI, and other agent harnesses. Its skills and routing instructions select workflows for tasks such as bug fixing, planning, feature work, refactoring, performance investigations, PR maintenance, and shipping; the bug-fixing workflow reproduces the failure, investigates how and why it occurs, delegates the fix, and reruns the failing case, involving an architect when the change crosses a function boundary. The package provides Claude Code and Codex plugins, a Pi extension, slash commands, subagent and question tools, wake-up tools, and setup for model defaults and reasoning effort. It runs scripts locally and has no server or telemetry; content read by its skills is sent to the configured model provider, and pull-request tools use the local GitHub CLI login.

Open Instinct is an open-source personal AI agent that users text through iMessage, SMS, email, or webhooks. It runs its own agent process in a microVM with a Linux desktop, uses the Pi agent loop and Composio to operate connected applications, and can create files such as PDFs in its workspace before sending them back as attachments. A policy guard evaluates every tool call. Its network model defines six trust tiers for contacts and their agents, with grants for narrowly scoped exceptions; permissions, invitations, agent-to-agent tools, approvals, scheduling, memory, and audit logging are handled by the repository's packages. Payments use a Stripe Link wallet to request a single-use card for an exact total after owner approval, with spending limits and confirmation rules defined in a policy file. The repository provides a TypeScript CLI, local development and Maritime deployment paths, a multi-user gateway, and documentation for configuration, permissions, protocols, security, and self-hosting. It is distributed under the MIT license; the README describes live iMessage and Maritime deployment as beta and requires users to provide their own service keys.