Flagged: sudo usage. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by stacklok · Codex Skill · ★ 71
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is brood-box safe to install? View the security audit →
Brood Box Warning This project is EXPERIMENTAL. APIs, CLI flags, config format, and behavior may change without notice between releases. Use at your own risk and please report issues. Run coding agents in hardware-isolated microVMs. Review every change before it touches your workspace. Table of Contents Why? Features Quick Start Usage Configuration Egress Firewall Supported Agents How It Works Security Model Documentation Building from Source Contributing License Why? Coding agents are powerful, but they need access to your workspace, your API keys, and the ability to run arbitrary code. That's a lot of trust to hand over.
| Stars | 71 |
| Forks | 10 |
| Language | Go |
| Category | Codex Skill |
| License | Apache-2.0 |
| Quality Score | 79.3663048014777/100 |
| Open Issues | 5 |
| Last Updated | 2026-09-18 |
| Created | 2026-02-13 |
| Platforms | claude-code, cli, codex, go |
| Est. Tokens | ~18k |
Looking for a brood-box alternative? If you're comparing brood-box with other codex skill tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
The Complete AI Development Toolkit for Claude Code. 106 skills, 36 agents, 171 hooks. Install `ork` for stabl
DeepContext is an MCP server that adds symbol-aware semantic search to Claude Code, Codex CLI, and other agent
Isolated VM environment for running Claude Code and Codex
the universal sandbox runtime for agents and humans.
On-demand Linux computers you can hand to an AI — real Firecracker microVMs with a browser, terminal, coding a
Self-hosted AI coding workspace to run and orchestrate Claude Code, Codex, Copilot, Cursor, Grok and OpenCode
Explore other popular codex skill tools:
brood-box is CLI tool for running coding agents inside hardware-isolated microVMs. It is categorized as a Codex Skill with 71 GitHub stars.
brood-box is primarily written in Go. It covers topics such as ai-agents, claude-code, codex.
You can find installation instructions and usage details in the brood-box GitHub repository at github.com/stacklok/brood-box. The project has 71 stars and 10 forks, indicating an active community.
brood-box is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to brood-box on Agent Skills Hub include orchestkit, deepcontext-mcp, coop. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: