alt Hacker NewsThis is EXACTLY why I never use an agent outside of https://github.com/kstenerud/yoloai
I appreciate that you're trying to make Claude Code safer, but the agent really needs to be a lot more restricted in its reach rather than its actions.
The agent should NOT have ANY access to:
- Your ENV
- Your homedir
- The network at large
- ANY other directory on your system
- No, not even your workdir.
The only safe way to use an agent is COMPLETELY isolated by a container or VM, using git semantics to extract its output.
Replies
its pretty trivial in any harness just to not have it post your shit to the public internet automatically. its a dumb idea to begin with
This comment feels like spam.
"It's difficult to make someone understand something about sandboxing when their business model is based on getting total access to your computer and your data" - Upton Sinclair (paraphrased)
That's the only safe way to use any software that you haven't thoroughly reviewed. But that's not how I use any software.