42-evey

evey-sandbox

Sandboxed code execution with resource limits for Hermes Agent.

290 stars31 forksPythonMIT

Repository last updated Jul 18, 2026

Overview

Evey Sandbox provides a secure, sandboxed environment for executing code within the Hermes Agent ecosystem. It enforces resource limits to prevent runaway processes and protect the host system.

This plugin is designed for developers who need to run untrusted or third-party code safely, such as in AI agent workflows, automated testing, or multi-tenant applications. It integrates directly with Hermes Agent to offer isolated execution with configurable constraints.

By leveraging operating system-level sandboxing and resource control, Evey Sandbox ensures that code execution does not exceed predefined CPU, memory, or disk limits. This makes it suitable for scenarios where reliability and security are paramount.

Highlights

  • Secure sandboxed code execution
  • Configurable CPU, memory, and disk limits
  • Integrates with Hermes Agent ecosystem
  • Prevents runaway processes

Features

Resource Limits

Set maximum CPU time, memory usage, and disk space for each execution to prevent resource exhaustion.

Hermes Agent Integration

Works as a plugin within the Hermes Agent framework, enabling sandboxed execution in agent workflows.

Isolated Environment

Executes code in a sandboxed environment to protect the host system from malicious or faulty code.

Installation

Commands are reproduced exactly as published by the project maintainers. Always check the upstream repository for the current instructions.

git clone https://github.com/42-evey/hermes-plugins.git
cp -r hermes-plugins/evey-* ~/.hermes/plugins/
cp hermes-plugins/evey_utils.py ~/.hermes/plugins/
# Restart hermes-agent

Requirements

  • Hermes Agent installed
  • Python 3.8+
  • Linux with cgroups support (or equivalent)

How it's built

Evey Sandbox is implemented in Python and licensed under MIT. It operates as a plugin for the Hermes Agent, extending its capabilities with secure code execution. The sandbox uses operating system primitives for resource control, such as cgroups on Linux or similar mechanisms on other platforms.

Integration with Hermes Agent is straightforward: the plugin registers itself with the agent's plugin system and exposes endpoints or tools for executing code with specified limits. The repository structure follows standard Hermes Agent plugin conventions.

Source

This summary was written for Neura Market from the project's own repository. Install commands, identifiers and licence details are reproduced unchanged. The 42-evey/evey-sandbox repository is the authoritative source and the place to file issues or contribute.

Category: Security & Privacy · Licensed under MIT

Related Hermes plugins