4 ms·
I like that it's all bash. How does this compare with Codex's and Claude's built-in sandboxing?
by dbmikus 7mo ago
I like that it's all bash.
How does this compare with Codex's and Claude's built-in sandboxing?
- e1g 7mo agoClaude: can escape its sandbox (there are GitHub issues about this) and, when sandboxed, still has full read access to everything on your machine (SSH keys, API keys, files, etc.) Codex: IIRC, only shell commands are sandboxed; the actual agent runtime is not.
- dbmikus 7mo agoCool, thanks for explaining!