Show HN: Capsule Bash – Sandboxed Bash for Agents

Category: security

Tags: sandbox, bash, wasm

Score: 7.0/10 (Innovation: 7, Technical: 7, Documentation: 7, Utility: 7)

Capsule Bash is a sandboxed command interpreter that reimplements bash commands in TypeScript, running them inside WebAssembly sandboxes for secure execution by LLM agents. It returns structured output including exit code, stdout, stderr, and filesystem diffs, which is innovative for agentic workflows. The project fills a known gap for safe, observable command execution in AI-driven automation.

Target audience: backend devs

Repository: https://github.com/capsulerun/bash · TypeScript · Apache-2.0 · 4 stars

View on Hacker News