Hacker News Reader

I run my agents with full permissions in containers. Feels like a reasonable tradeoff. Bonus is I can set up each container with exactly the stack needed.

Honest question, when was the last time you caught it trying to use a command that was going to "nuke your system"?

“Nuke” is maybe too strong of a word, but it has not been uncommon for me to see it trying to install specific versions of languages on my machine, or services I intentionally don’t have configured, or sometimes trying to force npm when I’m using bun, etc.

Maybe once a month

I sandbox everything inside https://github.com/strongdm/leash

That way the blast radius is vastly reduced.