Run Claude code in docker sandbox (sbx) to ensure it only has current folder access and limited or no network access. Especially since a lot of runs are now in โauto modeโ.
Unless even this is not really so safe!?
Any conversation
๐ค I built agent-top - an open-source htop for AI agents.
github.com/kannandreams/agent-top
Please check out and support giving your stars and sharing.
โฆ
I think a trusted piece of software such as your operating system should be in charge of managing permissions. For example, I believe with Wayland on gnome you no longer need to promise you aren't secretly taking screenshots of the whole monitor and shipping it somewhere because to do that Wayland requires you to get user permission.


