Browse / MCP servers
plimsollmark/plimsoll
A sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/
- MCP
- GitHub
Works.Tested on 2026-10-28. From the README alone, on Linux with Haiku and Linux with Luna.
What we checked
Does it run from the README?Yes. Running in 2:19 on a clean Linux box.The run
Tested Oct 27, 2026, rev e543f3c.
Does it do what the README says?1 of 1 claims held up.Evidence
“The local quickstart runs the WASM sandbox and returns department totals.”
Expected stdout totals for Engineering, Sales and Operations. Got {"Engineering":59000000,"Sales":20300000,"Operations":9800000}.
Which setups did we try?Works with Haiku, Luna.Setups
Linux / Haiku: works, Oct 27, rev e543f3c. Linux / Luna: works, Oct 28, rev e543f3c.
Needs keys, a login or a browser?No.Details
None seen
Is it safe to run?No unexpected network or file activity found in these checksWhat we saw
No problems traced to this repository code in these checks; a short run cannot prove safety. 400 listed items (named-host connections, static matches, dependency advisories) are below and do not change this verdict. 6 static matches retained as context.
Source contains encoded blob; review its purpose. docs/trainers/mcp-tour.js
Gitleaks found a possible hardcoded secret; value withheld. docs/callers.md
OSV reports a known vulnerability in this dependency version. 27 distinct locations. 189 findings.
Full event, path and process lists for each observed setup:
A quiet run is not a safety guarantee.
Is it maintained?Maintained · 110 commits in 90 days · 0 merged PRs in 90 days · 0 open issues · 0 open PRsActivity
actively maintained: last commit 0 days ago; 110 commits and 0 merged PRs in 90 days; 0 open issues, 0 open PRs; latest release 2026-10-27
Can I show this on my README?Copy the badge.Badge
The run
Oct 27 · rev e543f3cIndependent test, not endorsed by the project.