mitsuhiko: sharing a worker without OS-level isolation is unsafe for agent codemode

mitsuhiko · x · 2026-10-10

In a thread on codemode implementations for agents, mitsuhiko warns that doing only the basics while sharing a worker leads to real security issues (with an example). He says he initially dismissed the approach due to complexity and lack of proper isolation.

Related event: mitsuhiko warns AST interpreters alone are not enough to sandbox agent code(8 posts)→

Original post →

More from coding & agent

coding & agent channel →