18:30
2026-08-11
badshah.io
ai-safety
Never Trust Your AI Agent's Own Sandbox
Anthropic's Claude Code sandbox allows reading credential files such as ~/.aws/credentials and ~/.ssh/ by default, and the model can retry commands with the dangerouslyDisableSandbox parameter, accord…