3 ms·
That people allow these agents to just run arbitrary commands against their primary install is wild. Part of this is the tool's fault. Anything like that shoul
by margalabargala 1y ago
That people allow these agents to just run arbitrary commands against their primary install is wild.
Part of this is the tool's fault. Anything like that should be done in a chroot.
Anything less is basically "twitch plays terminal" on your machine.
- tough 1y agocodex at least has limitations on what folders can operate.
- serf 1y agoa large part of the benefit to an agentic ai is that it can coordinate tests that it automatically wrote on an existing code base, a lot of time the only way to get decent answers out of something like that is to let it run as bare metal as it can. I run cursor and the accompanying agents in a snapshot'd VM for this purpose. It's not much different than what you suggest, but the layer of abstraction is far enough for admin-privileged app testing, an unfortunate reality for certain personal projects. I haven't had a cursor install nuke itself yet, but I have had one fiddling in a parent folder it shouldn't have been able to with workspace protection on..