Tool · curated 25 Jul 2026
GitHub - DataDog/rshell: rshell - A Restricted Shell for AI Agents
First reported github.com
Coverage timeline
Single-source analysis — first reported, latest, and curated coincide.
Why it matters
rshell addresses the risk of AI agents with shell access being abused or manipulated (e.g. via prompt injection) into running dangerous commands, giving defenders a way to sandbox agent execution.
rshell, published by DataDog, is a restricted shell designed to constrain what commands AI agents can execute, using allow-lists (allowedpaths), builtins, and hooks to sandbox agent shell access. The Go-based tool aims to limit the blast radius of autonomous AI agents that are granted shell capabilities.