release-openshell
Skill17k starsChanged 18 days agoApache-2.0View on GitHub
Pick the latest qualified OpenShell prerelease and tag its commit as stable. Create and qualify a prerelease first when none exists.
- Reads credentials
We split this skill into the rules it gives an agent
3 rules. About 0 are common, 1 is distinctive, and 2 are very specific to this project.
≈0
Common · estimate
Many files like this have a rule of this kind.
≈1
Distinctive · estimate
This author's own choices. Worth a look.
2
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 18
Use the support branch instead of main for a previous minor version.
- Very specific: line 34
If no prerelease exists, agree on the version and source commit, then create and push vX.Y.Z-pre.1.
- Distinctive: line 42
Wait for the entire Pre-release run to pass before promoting it.
≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Release OpenShell
For the intended release version and branch, inspect the latest passing prerelease and changes since the previous stable release. Present the candidate to the maintainer. Once approved, dispatch Release from that branch:
gh workflow run release.yml --ref main -f tag=vX.Y.ZUse the support branch instead of main for a previous minor version. Release
selects the highest-numbered vX.Y.Z-pre.N reachable from that branch with a
successful Pre-release run triggered by that tag or dispatched on the same branch,
and matching passing release-tag-v1 qualification evidence. Missing or expired evidence blocks
promotion. Inspect the selected candidate in the promotion job summary.
The entire Pre-release run must succeed, including publication. If qualification
passed but publication failed, rerun the failed jobs before promoting the candidate.
Release creates vX.Y.Z at that exact commit, then rebuilds and publishes all
stable artifacts without rerunning qualification. Embedded versions change, so
stable artifacts are not byte-identical to the qualified prerelease. An existing
stable tag may be retried only if it already points to the selected commit.
Stable images are saved as OCI archives during the build and pushed under the
stable version tags during publication. Their SBOMs are verified before updating
latest; the qualified prerelease's commit-SHA image tags remain unchanged.
If no prerelease exists, agree on the version and source commit, then create and
push vX.Y.Z-pre.1. Prerelease tag pushes start Pre-release. If the tag was
created using GITHUB_TOKEN, dispatch Pre-release explicitly on the intended branch:
gh workflow run release-prerelease.yml --ref main -f tag=vX.Y.Z-pre.1Wait for the entire Pre-release run to pass before promoting it. Stable tag pushes do not
start Release. Release Auto-Tag creates and dispatches prereleases on main.
Stable releases serialize across branches. A release older than the highest
stable Git tag publishes versioned artifacts without moving GHCR latest, the
GitHub latest release, npm latest, or snap latest/stable. Its npm package
uses release-X.Y; snap files remain available in its GitHub Release rather than
updating a Snap Store support track. Docs retain an
immutable version and advance latest only for a newer version.
Watch the stable release run and report its result.
Trending
Steady: 0 new projects took it in the last 4 weeks, none the 4 weeks before.thin data
Who's talking about NVIDIA/OpenShell
- NVIDIA Developer“How to Secure & Run AI Agents with NVIDIA OpenShell”YouTube · Sep 28, 2026 · 60k views
- Zen van Riel“The Safest Way To Use Hermes & OpenClaw (OpenShell)”YouTube · Sep 13, 2026 · 14k views
- Signal Coders“NVIDIAOpenShell — OpenShell is the safe, private runtime for autonomous AI agents”YouTube · Oct 1, 2026 · 2.1k views
- Drift Intel “NVIDIA OpenShell Closes an AI Agent Loophole (Your Setup Still Has It)”YouTube · Sep 29, 2026 · 1.4k views
- NewsDoc“NVIDIA OpenShell: Deny-by-Default Agents #Shorts”YouTube · Oct 16, 2026 · 1k views
The biggest 5 of 77 mentions linking to the repository that our crawl found. Each line is their own headline.
See all 77
Talked about on Bluesky, YouTube, the web and Hacker News (77 times).
On Bluesky · 41
- Sep 29, 2026When you feel you need a head-inducing list of configurable ACL for your shell/VM, to run your AI agents. github.com/NVIDIA/OpenS... — @sungkim.bsky.social23 likes and reposts
- Oct 12, 2026AIエージェントをsandbox環境で分離するNVIDIA製ツール。ネットワークレベルのアクセス許可も設定可。Linux, macOS, WSL2などで動作。Rust実装だが各言語用SDKが用意されておりプログラムで制御可。brew install openshellでok — @matsuu.bsky.social7 likes and reposts
- Oct 23, 2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 NVIDIA / OpenShell ⭐ 18,266 (+211) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending.bsky.social5 likes and reposts · 1 reply
- Oct 24, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell comments #github.com — @hnbest.bsky.social4 likes and reposts
- Oct 24, 2026OpenShell – 自律型AIエージェント群のための、安全でプライベートな実行環境 OpenShell – A safe, private runtime for fleets of autonomous AI agents 🔺 489 💬 65 🔗 HN Post… — @hacker-news-jp.bsky.social4 likes and reposts · 1 reply
36 more on Bluesky
- Oct 22, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @hn100.atproto.rocks4 likes and reposts
- Mar 23, 2026hmm, openshell looks pretty interesting: github.com/NVIDIA/OpenS... basically just runs your agent in an OCI container (like we already do)… — @cboettig.bsky.social4 likes and reposts · 1 reply
- Sep 29, 2026🎉 Celebrating! 🎉 (500+ new stars) 📦 NVIDIA / OpenShell ⭐ 9,944 (+978) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending.bsky.social3 likes and reposts · 1 reply
- Sep 1, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★8466 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social3 likes and reposts
- Jul 10, 2026🔥 Hot Repo! 🔥 (100+ new stars) 📦 NVIDIA / OpenShell ⭐ 7,607 (+108) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending-rs.bsky.social3 likes and reposts
- Oct 25, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @newsyc500.bsky.social2 likes and reposts · 1 reply
- Oct 23, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents View Article | Discussion + AI Summary Summary of HN discussion 🧵👇 — @hncompanion.com2 likes and reposts · 1 reply
- Oct 23, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell [comments] [318 points] — @hnfeed.bsky.social2 likes and reposts
- Oct 23, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @betterhn300.e-work.xyz2 likes and reposts
- Oct 22, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @newsyc250.bsky.social2 likes and reposts
- Oct 22, 2026OpenShell is the safe, private runtime for fleets of autonomous AI agents. Agents are most useful when they can read files, install… — @ytroncal.bsky.social2 likes and reposts
- Oct 22, 2026Nvidia OpenShell https://github.com/NVIDIA/OpenShell https://news.ycombinator.com/item?id=50198675 — @hn100.atproto.rocks2 likes and reposts
- Oct 15, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★16335 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social2 likes and reposts
- Sep 29, 2026今日のGitHubトレンド NVIDIA/OpenShell OpenShellは、自律型AIエージェント向けの安全でプライベートな実行環境です。 エージェントにファイル操作やAPI利用などの機能を提供しつつ、ポリシーによってデータやネットワークへのアクセスを制限します。… — @dailygithubtrends.bsky.social2 likes and reposts
- May 13, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★5863 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social2 likes and reposts
- Oct 29, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★20681 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social1 likes and repost
- Oct 26, 2026Nvidia OpenShell: your agents never see real credentials! Open source OpenShell sandboxes agents. Creds reach approved endpoints only.… — @goldenrod8888.bsky.social1 likes and repost
- Oct 23, 2026今日のGitHubトレンド NVIDIA/OpenShell OpenShellは、自律型AIエージェント向けの安全でプライベートなランタイムです。 エージェントにファイル操作やAPI呼び出しなどの権限を与えつつ、データや秘密情報、ネットワークへの無制限なアクセスを制限します。… — @dailygithubtrends.bsky.social1 likes and repost
- Oct 23, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @hn.rbrt.fr1 likes and repost · 1 reply
- Oct 22, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents https://github.com/NVIDIA/OpenShell… — @newsyc200.bsky.social1 likes and repost
- Oct 22, 2026Nvidia OpenShell — @hackernewsrobot.bsky.social1 likes and repost
- Oct 22, 2026Nvidia OpenShell https://github.com/NVIDIA/OpenShell (https://news.ycombinator.com/item?id=50198675) — @betterhn50.e-work.xyz1 likes and repost
- Oct 22, 2026Nvidia OpenShell Discussion | hackernews | Author: niemandhier #AI — @news.karthihegde.dev1 likes and repost
- Oct 22, 2026Nvidia OpenShell https://github.com/NVIDIA/OpenShell (https://news.ycombinator.com/item?id=50198675) — @betterhn20.e-work.xyz1 likes and repost
- Oct 22, 2026Nvidia OpenShell | Discussion — @hackernewsbot.bsky.social1 likes and repost
- Oct 22, 2026🚀 Skyrocketing! 🚀 (200+ new stars) 📦 NVIDIA / OpenShell ⭐ 17,116 (+221) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending-rs.bsky.social1 likes and repost · 1 reply
- Oct 16, 2026GitHub - NVIDIA/OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. · GitHub — @fluid.sublimer.me1 likes and repost
- Oct 6, 2026maybe something like openshell? for the file pervert part anyway github.com/NVIDIA/OpenS... — @ninachaubal.com1 likes and repost
- Oct 2, 2026AI news - Oct 2, 2026 1. Cloudflare Releases Open-Source Clef Decision Models LINK 2. NVIDIA OpenShell enforces agent security via… — @hackobar.bsky.social1 likes and repost · 1 reply
- Oct 1, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★13657 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social1 likes and repost
- Jul 22, 2026NVIDIA / OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. ★7733 https://github.com/NVIDIA/OpenShell — @rusttrending.bsky.social1 likes and repost
- Jun 2, 2026🔥 Hot Repo! 🔥 (100+ new stars) 📦 NVIDIA / OpenShell ⭐ 6,582 (+142) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending-rs.bsky.social1 likes and repost
- May 14, 2026📦 NVIDIA / OpenShell ⭐ 5,866 (+46) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI agents. — @github-trending-rs.bsky.social1 likes and repost
- Mar 21, 2026NVIDIA OpenShell: safe, private runtime for autonomous AI agents https://github.com/NVIDIA/OpenShell — @nono2357.bsky.social1 likes and repost · 1 reply
- Oct 27, 2026#OpenShell - The safe, private runtime for fleets of autonomous AI agents github.com/NVIDIA/OpenS... #AI — @joeingeno.bsky.social0 likes and reposts · 1 reply
- Sep 29, 2026🎉 Celebrating! 🎉 (500+ new stars) 📦 NVIDIA / OpenShell ⭐ 9,944 (+978) 🗒 Rust OpenShell is the safe, private runtime for autonomous AI… — @github-trending-rs.bsky.social0 likes and reposts · 1 reply
On YouTube · 25
- Sep 28, 2026How to Secure & Run AI Agents with NVIDIA OpenShell — NVIDIA Developer60k views · 50 comments
- Sep 13, 2026The Safest Way To Use Hermes & OpenClaw (OpenShell) — Zen van Riel14k views · 19 comments
- Oct 1, 2026NVIDIAOpenShell — OpenShell is the safe, private runtime for autonomous AI agents — Signal Coders2.1k views · 1 comment
- Sep 29, 2026NVIDIA OpenShell Closes an AI Agent Loophole (Your Setup Still Has It) — Drift Intel 1.4k views · 4 comments
- Oct 16, 2026NVIDIA OpenShell: Deny-by-Default Agents #Shorts — NewsDoc1k views
20 more on YouTube
- Jun 18, 2026I Tested NVIDIA OpenShell To see if the Coding Agent stops Leaking Credentials — DevAndACupsays it tested it740 views · 1 comment
- Sep 29, 2026OpenShell Setup: Sandbox Your AI Agents with NVIDIA's Free Runtime (Full Tutorial) — GENZ TECH 726 views
- Oct 7, 2026OpenShell: How to set it up free in 7 minutes — OverClocked439 views
- Oct 3, 2026NVIDIA OpenShell Explained: Secure Sandboxes for Autonomous AI Agents — Alex Hitt422 views
- Oct 24, 2026OpenShell: NVIDIA's Free Agent Jail With 4 Policy Walls — Prism Labs383 views
- Oct 8, 2026NVIDIA OpenShell: lock your AI agent in a sandbox (free) #nvidia #aiagents #opensource — Kiran CK380 views · 1 comment
- Oct 18, 2026NVIDIA OpenShell lets AI agents work for you without touching your secrets — bestatAI286 views · 1 comment
- Oct 1, 2026What is NVIDIA OpenShell ? Secure AI Agent Runtime Explained — Open Projects246 views · 1 comment
- Sep 30, 2026NVIDIA/OpenShell — Agents, on a leash. 🟡 Watchlist #Shorts — ForkCast224 views
- Oct 1, 2026OpenShell: safe private runtime for autonomous AI agents — Next Horizon164 views · 1 comment
- Sep 30, 2026NVIDIA OpenShell — AI & Tech News152 views · 1 comment
- Sep 30, 2026GitHub - NVIDIA/OpenShell: OpenShell is the safe, private runtime for autonomous AI agents. — GitHub Daily Trend AI Podcast134 views · 2 comments
- Sep 30, 2026NVIDIA/OpenShell is an open-source, Apache 2.0 runtime for safer, private autonomous AI agents, — Nexbit Studio115 views
- Oct 25, 2026NVIDIA's OpenShell: A Kernel-Level Sandbox for AI Agents — Hidden Repos - GitHub gems nobody talks about114 views
- Oct 3, 2026Your AI Agent Needs a Sandbox | NVIDIA OpenShell — Cemong84 views
- Oct 10, 2026An idle Nvidia OpenShell sandbox woke 890 times a second — Agent Audit83 views
- Oct 4, 2026NVIDIA OpenShell on AWS: Real Sandbox & AI Agent Walkthrough | Software Sushi — Software Sushi - David69 views
- Oct 4, 2026NVIDIA OpenShell Live Walkthrough: Dashboard, AI Agent & Policy Enforcement | Software Sushi — Software Sushi - David29 views
- Sep 30, 2026NVIDIA OpenShell — The Safe Runtime for AI Agents | Repo of the Day — TECH NOW & NEXT27 views
- Oct 23, 2026Caging Autonomous Agents: NVIDIA OpenShell in Production — In Prod.4 views
On the web · 6
- Oct 24, 2026OpenShell by NVIDIA: Sandbox for AI Agents Explained — activepieces.com
- Oct 1, 2026What Is NVIDIA OpenShell? Sandbox, Supervisor and Sentry — ackuity.ai
- Sep 30, 2026OpenShell is the safe, private runtime for autonomous AI ... — spreaker.com
- Sep 29, 2026Nvidia OpenShell — en.wikipedia.org
- Apr 3, 2026NVIDIA OpenShell and Agent Toolkit: Deploy Secure ... — spheron.network
1 more on the web
- Mar 30, 2026How NVIDIA OpenShell Puts a Control Plane Around Your AI ... — kenhuangus.substack.com
On Hacker News · 5
- Oct 22, 2026OpenShell – A safe, private runtime for fleets of autonomous AI agents507 points · 218 comments
- Mar 16, 2026OpenShell: Nvidia's sandbox for AI agents like OpenClaw4 points · 1 comment
- Oct 2, 2026Nvidia/OpenShell: Safe, private runtime for autonomous AI agents2 points
- Apr 21, 2026Nvidia OpenShell: safe, private runtime for autonomous AI agents2 points
- Mar 17, 2026OpenShell – private runtime for autonomous AI agents2 points
In this repository28 other files it gives its agents.
- AGENTS.mdAGENTS.md
- CLAUDE.mdCLAUDE.md
- apply-triage-actionSkill
- build-from-issueSkill
- build-openshell-mxc-windowsSkill
- create-github-issueSkill
- create-github-prSkill
- create-rfcSkill
- create-spikeSkill
- fix-security-issueSkill
- helm-dev-environmentSkill
- launch-openshell-gatorSkill
- review-github-prSkill
- review-security-issueSkill
- review-triage-queueSkill
- sbomSkill
- sync-agent-infraSkill
- test-release-canarySkill
- triage-issueSkill
- tui-developmentSkill
- update-docs-from-commitsSkill
- watch-github-actionsSkill
- openshell-policy-advisorSkill
- gator-gateSkill
- debug-inferenceSkill
- debug-openshell-clusterSkill
- generate-sandbox-policySkill
- openshell-cliSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

