alt Hacker NewsAccess to read sensitive files and access to internet could easily lead to data exposures on the internet, no? Without any terminal or shell access.
Access to read sensitive files and access to internet could easily lead to data exposures on the internet, no? Without any terminal or shell access.
Yes, but what I'm saying is that it is much easier to put a limit on the read_file tool or the http tool rather than sandboxing your whole environment.
You only really need to sandbox when you provide access to tools that are almost impossible to filter correctly, such as a bash tool or a tool for arbitrary code execution.