Sandboxes

Source-reviewed research and assets tagged with Sandboxes.

Membership follows reviewed tags; it does not establish a dependency between neighboring records. Dates preserve source precision. Annotations retain their original language.

Papers & surveys

41Back to top ↑
Paper

ceLLMate: Sandboxing Browser AI Agents

Luoxi Meng, Henry Feng et al.

ceLLMate constrains browser-agent authority through an extension that applies policies at the HTTP layer. It evaluates this sandbox against prompt-injection attacks in WASP, avoiding dependence on brittle low-level click and keystroke policies.

Web
Paper

SCUBA: Salesforce Computer Use Benchmark

Yutong Dai, Krithika Ramakrishnan et al.

SCUBA evaluates enterprise UI navigation and CRM workflows with 300 task instances derived from Salesforce user interviews. Salesforce sandbox execution and milestone-based assessment support comparisons between zero-shot agents and agents given demonstrations.

Benchmarks

3Back to top ↑
Benchmark

AppSim-Bench

Simulated mobile applications and evaluation tooling for reproducible GUI-agent tasks with controlled application state.

Android
Benchmark

MobileGym

A browser-hosted mobile-app simulator with programmable state, parameterized tasks and deterministic state-checking judges for parallel GUI-agent evaluation and online reinforcement learning.

Web
Benchmark

OpenApps

Configurable browser apps and task rewards for testing computer-use agents under changes in content, layout and appearance.

Web

Engineering & industry

14Back to top ↑
Infrastructure

AgentDesk

Desktop environments that AI agents control programmatically, run locally with Docker or remotely on Kubernetes, built on the agentd REST daemon and offering a coordinate-grid overlay for LMM input.

Desktop
Framework

AgentStudio

Toolkit and Ubuntu-based environment for building and evaluating generalist computer-use agents through GUI and API interaction.

DesktopLinux
Infrastructure

AndroidEnv

Android device-control platform with screenshots, accessibility telemetry, input actions, and an optional reinforcement-learning task interface.

Android
Infrastructure

E2B Desktop

Open-source, isolated Linux Xfce desktop sandboxes for computer-use agents, driven from Python or JavaScript SDKs with screen streaming, mouse, keyboard and window control, screenshots and shell.

DesktopLinux
Framework

RedTeamCUA

A controlled testing framework that combines desktop virtual machines and replicated websites to evaluate computer-use agents against indirect prompt injection.

WebDesktop
Infrastructure

Steel Browser

Open-source browser API managing Chrome sessions for agents, reachable through Puppeteer, Playwright or Selenium over CDP, with persisted cookies, proxy rotation, stealth and a session debugging UI.

Web

Get full records and evidence through the topic export manifest. Source records can be passed to the standard RAG and citation exporters after cloning the catalog.