Running Local AI Coding Agents: How to Sandbox Against Prompt Injections and Accidents
aj_kt · reddit · 2026-08-13
Running AI agents with direct file system and shell access locally raises significant security concerns. The author notes that without restrictions, agents are just one malicious prompt injection or accident away from leaking or deleting sensitive files.
To isolate risks, the author experimented with sandboxing: using Docker Sandbox on Windows and Claude Code's built-in Seatbelt-based sandbox on Mac. However, they found that sandbox constraints frequently break tool integrations, Git workflows, and package installations, making troubleshooting a nightmare. Eventually, the author resorted to running Claude mostly un-sandboxed for friction reduction, which feels incredibly unsafe for unmonitored workflows.
The author asks the community whether strict physical or system-level isolation is necessary for local agents and how to balance security with development efficiency.
Related event: Docker Sandboxes Reshape Permission Models for AI Coding Agents(3 posts)→
More from coding & agent
- Panoramic Analysis of 175 Talks: Berkeley Agentic AI Summit 2026 Deep Dive — seanwbren · 2026-08-14
- ProtonGraph: Open-Source Node-Based Tool for Procedural 3D Content Generation — tom_doerr · 2026-08-14
- Forensics Tool bulk_extractor Fixes 100+ Issues with Codex Aid — matthew_d_green · 2026-08-14
- New Paper on Coding Agents: Beyond Clones Towards a Long-Term Perspective — teortaxesTex · 2026-08-14
- AI Agent Setup: Isolating Global and Project-Level Instructions Across Three Directories — brandon_galang · 2026-08-14
- Claude Code cuts dependency upgrades from 6+ hours to 85 minutes with zero regressions — JeremyCMorgan · 2026-08-14