opencode gotcha: project config can re-enable disabled bash
julianharris · x · 2026-10-27
On securing coding agents: the author notes that disabling bash is a straightforward config, but opencode's gotcha is that a project-level opencode.json can re-enable it — so you must also switch off project settings to prevent a rogue agent from overriding the restriction.
A reply notes that Claude and Codex both have fairly mature dynamic fetch-blocking strategies, and asks about the dcg tool.
More from coding & agent
- Polylane builds its agent memory system on Git, with nightly self-correction — dinasaur_404 · 2026-10-27
- Manus on rebuilding itself as an AI-native org: expose interfaces, demand evidence, go async — dotey · 2026-10-27
- RL doesn't just reward thinking longer—it incentives parallel agent swarms — rosstaylor90 · 2026-10-27
- A peek at a personal multi-agent setup: Codex, Muse and Grokbot with role-based memory — op7418 · 2026-10-27
- Context Layer V2 evals: ~40% accuracy gain, ~30% latency cut vs MCP alone — shensi · 2026-10-27
- Agent made 133 calls in 41 seconds: engineer argues physics, not protocols, is the bottleneck — shensi · 2026-10-27