Tool

GitHub - DataDog/rshell: rshell - A Restricted Shell for AI Agents

Page published

Coverage timeline

25 Jul 2026github.comobserved

Single-source analysis — one report is available.

Why it matters

rshell addresses the risk of AI agents with shell access being abused or manipulated (e.g. via prompt injection) into running dangerous commands, giving defenders a way to sandbox agent execution.

rshell, published by DataDog, is a restricted shell designed to constrain what commands AI agents can execute, using allow-lists (allowedpaths), builtins, and hooks to sandbox agent shell access. The Go-based tool aims to limit the blast radius of autonomous AI agents that are granted shell capabilities.