I like that it's all bash. How does this compare with Codex's and Claude's built... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

dbmikus 6 months ago | parent | context | favorite | on: Agent Safehouse – macOS-native sandboxing for loca...

I like that it's all bash.

How does this compare with Codex's and Claude's built-in sandboxing?

e1g 6 months ago [–]

Claude: can escape its sandbox (there are GitHub issues about this) and, when sandboxed, still has full read access to everything on your machine (SSH keys, API keys, files, etc.)

Codex: IIRC, only shell commands are sandboxed; the actual agent runtime is not.

dbmikus 6 months ago | [–]

Cool, thanks for explaining!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact