Coding Agents

OpenHandsCoding Agents

Edits files, runs tests and browses documentation inside an isolated container, so a failed run cannot damage the host. Competitive on SWE-bench style benchmarks, but budget carefully before pointing it at a real repository — long autonomous runs consume a great deal of tokens and still need review before anything is merged.

ClineCoding Agents

Runs in VS Code and asks for approval before each file write or terminal command, which keeps a human in the loop without breaking flow. MCP support lets it reach tools beyond the editor. The approval prompts are the safety mechanism — turning them all off removes the main reason to prefer it.

GooseCoding Agents

Runs locally as a CLI or desktop app and gains capabilities through MCP extensions rather than a fixed tool list, so the same agent handles code, infrastructure and third-party services. Model-agnostic, which matters if you expect to switch providers.

AiderCoding Agents

Every change lands as a git commit, which makes an AI edit exactly as reviewable and revertible as a colleague's. Its repository map lets it work on codebases far larger than a context window. Terminal-only by design — a strength if you live there, a non-starter if you want it inside an editor.

ContinueCoding Agents

Autocomplete, chat and edits driven by whichever model you point it at, including one running on your own hardware. That makes it one of the few realistic options where code cannot leave the building. Configuration is more involved than the hosted alternatives — the price of that flexibility.

codex-securityGuardrails

`npx @openai/codex-security scan .` walks a checkout and leaves JSON results on stdout, while `--mode deep` spreads discovery across workers and subagents until it stops turning up anything new. Across runs, `scans compare BEFORE_SCAN_ID AFTER_SCAN_ID` matches findings by root cause and labels them new, persisting, reopened, resolved or unknown, so a second scan reports movement instead of restating the whole report. It is a poor fit as a pre-commit gate: deep discovery runs until `--max-time-hours`, which defaults to 96. Access is also gated — the CLI needs access to Codex Security, and some cybersecurity requests and protected findings require Trusted Access for Cyber approval, so cloning the repo on its own scans nothing.

cloudflare-osSandboxes

Cloudflare OS pairs an agent chat with "Gadgets" — small apps the built-in coding agent writes for you, each running as a Dynamic Worker with its internet access disabled, its client confined to a sandboxed iframe that reaches the server only over Cap'n Web via `postMessage()`. External services are reached through Gatekeepers, per-service Workers that wrap an API in Cap'n Web, log every call, and simulate side-effecting actions so the agent keeps queueing work while approvals wait for you to review them in bulk. The commitment to Workers runs deep: every workspace is a Durable Object, every Gadget a Dynamic Worker Facet, and Facets and Dynamic Workers were added to the runtime specifically for this project — so hosting means a Cloudflare account, and the deploy-to-your-own-servers-on-`workerd` path is still marked COMING SOON in the README. The maintainers call the August 2026 v2 rewrite an early access release with many rough edges, and many Gatekeepers need configuration of their own — including OAuth client credentials per service — before GitHub or Google will connect.