Finance●●Solid
SandClaw = A sandboxed alternative to OpenClaw for trading
Sandboxed broker plugins keep API keys from the UI layer.
Bold BetShip It
kokogo
204mo ago
Back to browse
GitHub Repository
The CMS where a plugin can't take over your site: OS-sandboxed plugins, per-capability grants. SSR, no PHP.
2 starsTypeScript
WordJS – Open-source CMS where plugins run in OS sandboxes
by jaimedmartinezh·Aug 1, 2026·1 point·0 comments
AI Analysis
●●●BangerBig BrainZero to One
OS-level process isolation for CMS plugins prevents the single-point failure of WordPress.
Strengths
- •Enforces plugin isolation via OS processes rather than relying on trust or language sandboxes.
- •Per-capability grants mean plugins start with zero access until explicitly allowed.
- •No PHP or MySQL dependencies simplify the deployment stack significantly.
Weaknesses
- •Process-per-plugin overhead may impact performance on low-resource hosting environments.
- •Ecosystem lacks the massive plugin library available to established WordPress competitors.
Category
Target Audience
Developers building multi-plugin websites or agencies
Similar To
WordPress · Strapi · Ghost
Similar Projects
Developer Tools●●Solid
Sandbox agents without losing your dev environment
Virtualenv-style sandboxing with namespace isolation for runaway LLM agents.
Big BrainNiche Gem
mixedbit
404mo ago
Developer Tools●●●Banger
YSA – Sandbox for AI agents with outbound network control
Defense-in-depth sandboxing for Claude agents: Podman + MITM proxy + seccomp + iptables.
WizardryBig Brain
jordanedev
205mo ago
Infrastructure●●Solid
Run untrusted WASM plugins with CPU/mem/network/file budgets
Deterministic budget enforcement on WASM syscalls—clean threat model, but early-stage tooling.
WizardryNiche Gem
akgitrepos
115mo ago
Security●●●Banger
Vmette – hardware-isolated microVM sandbox for local AI agents (macOS)
Hypervisor isolation for AI agents beats containers when running untrusted code locally.
Big BrainWizardrySolve My Problem
swiftugandan
302mo ago
Security●●●Banger
Drop – Linux sandboxing for LLM agents and untrusted code
Virtualenv for system isolation—your configs carry over but SSH keys stay protected.
Big BrainSolve My ProblemZero to One
mixedbit
104mo ago