sandbase-harness

Name: sandbase-harness
Author: sandbaseai

PluginConfirmed pluginCommunity

sandbaseai/sandbase-harness · updated yesterday

View source ↗

Installation

dsh plugin --profile web add -w

dsh plugin --profile web add git+https://github.com/sandbaseai/sandbase-harness.git

dsh plugin --profile web add managed-agents

dsh plugin --profile web add github:sandbaseai/sandbase-harness

Plugins in this repository

managed-agentsv0.3.8✓
Local-first, self-hosted AI agent runtime with Claude Managed Agents-style APIs, sandboxed sessions, memory, tools, audit, replay, and a local Console.
homepage
https://github.com/sandbaseai/sandbase-harness#readme ↗
package.json
package.json
dsh.bundle.patch
examples/deepseek-harness/cordis.yml

Paths are pinned to commit a634eb43145a

Overview

Local-first, self-hosted AI agent runtime and MCP bridge with sandboxed sessions, memory, credentials, audit/replay, and a local Console.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 8, 2026, 9:21 AM

High risk

Checked commit: a634eb43145a
Evidence Score: 79/100
Static risk: High risk
Files scanned: 3
Findings: 4

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance18/20

Compatibility evidence8/20

Security signals3/10

Compatibility confidence: Limited

Install-time scripts (1)

preparenode scripts/prepare-install.mjs

Findings (4)

Highinstall.script

package.jsoninstall-time

"prepare": "node scripts/prepare-install.mjs"

Mediumcredentials.env-secret
examples/deepseek-harness/cordis.yml:12credential-access
```
MANAGED_AGENTS_API_KEY: !!js process.env.MANAGED_AGENTS_API_KEY ?? ''
```
Mediumobfuscation.child-process
scripts/prepare-install.mjs:2obfuscation
```
import { spawnSync } from 'node:child_process';
```
Mediumobfuscation.child-process
scripts/prepare-install.mjs:14obfuscation
```
const result = spawnSync('npm', ['run', 'build'], {
```

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0