@neo: Run Claude code in docker sandbox (sbx) to ensure it only has current folder access and limited or no network access. Especially since a lot of runs are now in “auto mode”.
Anthropic has made auto mode the default in Claude Code for Pro, Max, and Team plans, enabling longer-running autonomous work and catching more dangerous commands, according to a blog post by Claude. …