Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.