vrr/spawn
2
0
Fork 0
mirror of https://github.com/OpenRouterTeam/spawn.git synced 2026-05-08 10:09:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7
spawn/daytona
History
A f1e8d946df
fix: secure upload_file functions against command injection in 5 clouds (#453) 
Replace unsafe printf '%q'-escaped unquoted variables with validated
single-quoted embedding in upload_file() for fly, northflank, daytona,
e2b, and koyeb. The previous pattern used unquoted $escaped_content and
$escaped_path in command strings passed to bash -c or run_server, which
could allow command injection via crafted filenames.

The fix:
- Validates remote_path rejects unsafe chars (', $, `, newlines)
- Uses base64 content directly (alphanumeric + /+= is shell-safe)
- Single-quotes both content and path in the command string
- Uses printf '%s' instead of echo for safer output

Matches the pattern already used by render, modal, and railway.

Agent: security-auditor

Co-authored-by: A <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-02-11 06:28:45 -08:00
..
lib fix: secure upload_file functions against command injection in 5 clouds (#453) 2026-02-11 06:28:45 -08:00
aider.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
amazonq.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
claude.sh QA-Bot setup (#335) 2026-02-10 19:51:07 -08:00
cline.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
codex.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
continue.sh fix: Escape API keys in continue.sh JSON configs to prevent injection (#374) 2026-02-11 00:13:19 -08:00
gemini.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
goose.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
gptme.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
interpreter.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
kilocode.sh feat: Add kilocode scripts for e2b, modal, fly, civo, scaleway, daytona (#113) 2026-02-09 19:45:51 -08:00
nanoclaw.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
openclaw.sh Add Daytona cloud provider with all 12 agent scripts 2026-02-08 05:18:38 +00:00
opencode.sh fix: Use robust OpenCode install method across all clouds (#48) 2026-02-07 23:02:18 -08:00
plandex.sh Add Plandex coding agent with 14 cloud implementations (#36) 2026-02-07 21:35:04 -08:00
README.md Add GitHub Actions triggers for Sprite services (#53) 2026-02-08 10:29:18 -08:00

README.md

Daytona

Daytona sandboxed environments for AI code execution. Daytona

Sub-90ms sandbox creation. True SSH support via daytona ssh. Requires DAYTONA_API_KEY from https://app.daytona.io.

Agents

Claude Code

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/claude.sh)

OpenClaw

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/openclaw.sh)

NanoClaw

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/nanoclaw.sh)

Aider

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/aider.sh)

Goose

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/goose.sh)

Codex CLI

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/codex.sh)

Open Interpreter

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/interpreter.sh)

Gemini CLI

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/gemini.sh)

Amazon Q CLI

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/amazonq.sh)

Cline

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/cline.sh)

gptme

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/gptme.sh)

OpenCode

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/opencode.sh)

Plandex

bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/plandex.sh)

Non-Interactive Mode

DAYTONA_SANDBOX_NAME=dev-mk1 \
DAYTONA_API_KEY=your-api-key \
OPENROUTER_API_KEY=sk-or-v1-xxxxx \
  bash <(curl -fsSL https://openrouter.ai/lab/spawn/daytona/claude.sh)

Environment Variables

Variable Description Default
DAYTONA_API_KEY Daytona API key (prompted)
DAYTONA_SANDBOX_NAME Sandbox name (prompted)
DAYTONA_CPU Number of vCPUs 2
DAYTONA_MEMORY Memory in MB 2048
DAYTONA_DISK Disk size in GB 5
OPENROUTER_API_KEY OpenRouter API key (OAuth or prompted)