Declaw Arena – a CTF-style challenge to break an AI agent in a microVM
An interactive security challenge. Control an AI agent and try to exfiltrate data from a sandboxed environment protected by Declaw.
Declaw Arena – a CTF-style challenge to break an AI agent in a microVM launched on July 2, 2026 with 8 votes, #2,235 of 24,623 launches that month and more than 75% of that year's launches.
What it does
declaw is the first agent runtime that fuses sandbox isolation, full network controls, AI guardrails, and agent observability. Every outbound byte can be configured to inspected, redacted, blocked. Every agent action is logged. Sandbox vendors don't ship guardrails; guardrail vendors don't own the runtime. declaw does both, in one SDK.
A real AI agent guards a secret, running in an isolated Declaw sandbox. You're the attacker — make it slip. Only Declaw's runtime policies stand in your way. Same agent, same sandbox, same secret — only the policies change. A research assistant scoped to a fixed set of reference sources. A data-sync agent that POSTs records to partner API endpoints. Root shell, sensitive data, one egress policy in the way. Turn it off. Root shell. Steal the cloud account's keys via the metadata endpoint. Goal: Make the analyst leak an individual customer's SSN, credit card, or email. The agent follows its system prompt — nothing else protects it. Declaw redacts SSNs, credit cards, emails, and phone numbers…from declaw.ai
Does a similar job
all alternatives →
Agent ArenaJun 2026 · arena42.ai · ▲348Creator here. I built Agent Arena to answer a question that kept bugging me: when AI agents browse the web autonomously, how easily can they be manipulated by hidden instructions? How it works: 1. Send your AI agent to ref.jock.pl/modern-web (looks like a harmless web dev cheat sheet) 2. Ask it to summarize the page 3. Paste its response into the scorecard at wiz.jock.pl/experiments/agent-arena/ The page is loaded with 10 hidden prompt injection attacks -- HTML comments, white-on-white text, zero-width Unicode, data attributes, etc. Most agents fall for at least a few.…
Continue? Y/N: A 60-second game about AI agent permission fatigueMay 2026 · llmgame.scalex.dev · ▲386A 60-second game about LLM permission fatigue. Claude Code needs your approval — but are you really reading the commands?
PlaygroundJul 2026 · playground.fabraix.com · ▲198We build AI agents to find vulnerabilities in other AI agents. The playground started as an internal tool that we used to test our own offensive agent Nyx. But we realised that hacking an AI is about have as wide a distribution of attacks as possible, especially those which aren't in the distribution of the models. So we are launching playground as a platform to crowdsource agent jailbreaks. And although hacking AI is super fun and we are sure people will do it for free, we want to reward those who help us push forward the offensive frontier of AI. So we are committing $100K in prizes over…
yolo-cage – AI coding agents that can't exfiltrate secretsJan 2026 · github.com · ▲60I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful! Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics for the linear solver, the persistence layer, the front-end, and planning for the second-generation solver. I was losing my mind playing whack-a-mole with the permission prompts. YOLO mode felt so tempting. And yet. Then it occurred to me: what if YOLO mode isn't so bad?…
Freeact – A Lightweight Library for Code-Action Based Agents2025 · github.com · ▲122Hello! We just released freeact (https://github.com/gradion-ai/freeact), a lightweight agent library that empowers language models to act as autonomous agents through executable code actions. By enabling agents to express their actions directly in code rather than through constrained formats like JSON, freeact provides a flexible and powerful approach to solving complex, open-ended problems that require dynamic solution paths. * Supports dynamic installation and utilization of Python packages at runtime * Agents learn from feedback and store successful code actions as…
More dev tools this month
the category →
Contribute to oosexgang/hackios-xnu-kernel development by creating an account on GitHub.
Dev tools · 1d ago · github.com
open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.
Dev tools · 29d ago · github.com
Contribute to reladraw/reladraw development by creating an account on GitHub.
Dev tools · 27d ago · github.com
OpenBot▲362Grok Bot alternative: free, local, open-source, multiplayer
Dev tools · 24d ago · openbot.run
Talanoa▲346Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…
Dev tools · 22d ago · talanoa.email
Source: Show HN post ↗
Launched alongside, July 2026
the whole month →- IR
I might be the only SRE on Earth with his own bowling center. It's a more in-depth gig than you'd think. My family and I bought an abandoned 8-lane bowling center in the rural mid-west. In our small town there weren't many recreation options for families. You've heard of a food desert? This is an R&R desert. It had been abandoned for a good reason. The roof leaks, the electrical system was constantly surging, and my 70-year-old bowling equipment (still) doesn't work perfectly. The system that keeps your score is particularly interesting to me. It's the thing you watch during your game, but…
Life & fun · Jul 2026
18 Words▲1,160Play 18 Words, the free daily word puzzle. The official home is 18words.com. Tap Play now to open today
Life & fun · Jul 2026 · 18words.com
- BA
Over the past few months, our team has been building more and more slidedecks using web frontend technologies with coding harnesses like Claude Code, but a common complaint is to make even small edits we need to edit the code either manually or via the harness. To avoid this loop, I ended up creating Bento, a single HTML file with everything you need in a slide tool including animations and shared editing. There's no install or cloud login, everything works offline. The default deck is around 560 KB and it doesn't need to fetch anything once you got it. Open it in a browser and then you can…
Dev tools · Jul 2026 · bento.page
A few days ago I found myself trying out GLM 5.2 and was really positively impressed. The capabilities and security I was getting from this LLM are similar to those I've gotten from models like Claude or GPT, and this really surprised me. But then I thought, "I wonder how it would work on a normal computer like mine," and above all, "I wonder if it would work without going into OOM on a computer like mine." So I started working with the help of agents to test this possibility. I started converting the model to int4, understanding MTP usage, and if possible implementing DSA for long context.…
AI · Jul 2026 · github.com
OpenSEO▲928Hello! For the last 2 months, I've been building OpenSEO. It's a user friendly UI wrapping the DataForSEO API which has high quality SEO data for keywords, backlinks, AI SEO and competitor research. Instead of paying $100+ per month, you buy DataForSEO credits and pay only for usage. The coolest thing about the project so far has been hearing about what people are building on top of it. People are using coding agents to quickly integrate with Google Search Console, Google Ads and building their own AI SEO and reporting features. Many were already building their own custom solutions around…
Dev tools · Jul 2026 · openseo.so