Surviving rm -rf: Sandboxing AI agents with jail.nix
TL;DR Use jail.nix to sandbox your AI agent environment to protect your host machine from rogue agent exfiltrating your API keys or stealing browser cookies. If you also enable Claude’s --dangerously-skip-permissions or Gemini’s --yolo, there is more reason to properly restrict what the agents can do. Besides, proper sandboxing gives you ease of mind knowing that it can’t wreak havoc on your host machine. Getting Started For the impatient: ...