alt Hacker NewsIt is really easy to restrict and contain an AI agent as long as you don't give it access to a terminal. If you only give it tools to read files and access the internet, then it is much easier to just restrict the tools themselves rather than setting up a whole isolated sandbox.
Access to read sensitive files and access to internet could easily lead to data exposures on the internet, no? Without any terminal or shell access.