Sanductor
Runs coding agents as a sandboxed, non-admin macOS user with no GitHub write access.
Sanductor runs your coding agents in parallel git worktrees under a separate, sandboxed, non-admin macOS user, so they can't touch your home directory, GitHub credentials, signing keys or host environment variables even if one goes rogue. You go from an issue, pull request or security advisory to a signed, rebased, pushed PR with one click, then pull in CI failures or bot review comments for another pass, with an optional "autofix" for changes you trust. Agents keep running over SSH as that sandboxed user even after you quit the Mac app. Free and open source under AGPLv3, with no account, subscription or hosted relay.
What holds up
- +No GitHub write access for agents — even a compromised SSH session can't push code
- +Free and open source under AGPLv3, with no account or hosted relay
- +One-click sign, rebase, push and PR once you approve the agent's work
Mind the limits
- −macOS only, and macOS 26+ for the direct download — otherwise install via Homebrew
- −No hosted relay by design, so remote SSH access is on you to set up and secure
Picked here? Add the badge
Put it on your site. It links back to this page. Free for every listed product.
<a href="https://stillworks.dev/products/p/sanductor/"><img src="https://stillworks.dev/badge/sanductor.svg" alt="Picked by StillWorks" width="230" height="54"></a>