{"slug": "hazmat-open-source-containment-for-ai-agents", "title": "Hazmat: Open-source containment for AI agents", "summary": "Hazmat, an open-source tool, runs AI coding agents inside a separate account on the user's own machine to prevent them from accessing sensitive data like SSH keys and cloud credentials. It supports Claude Code, Codex, OpenCode, Cursor Agent, and custom scripts, addressing the security risk of agents running with full user privileges.", "body_md": "Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which means it can read anything you can read. That includes SSH keys, cloud credentials, and the pile of configuration in your home directory that has accumulated … [More ](https://www.helpnetsecurity.com/2026/08/17/hazmat-open-source-ai-coding-agent-containment/)\n\nThe post [Hazmat: Open-source containment for AI agents](https://www.helpnetsecurity.com/2026/08/17/hazmat-open-source-ai-coding-agent-containment/) appeared first on [Help Net Security](https://www.helpnetsecurity.com).", "url": "https://wpnews.pro/news/hazmat-open-source-containment-for-ai-agents", "canonical_source": "https://www.helpnetsecurity.com/2026/08/17/hazmat-open-source-ai-coding-agent-containment/", "published_at": "2026-08-17 05:00:17+00:00", "updated_at": "2026-08-17 05:10:42.700420+00:00", "lang": "en", "topics": ["ai-safety", "ai-tools", "developer-tools"], "entities": ["Hazmat", "Claude Code", "Codex", "OpenCode", "Cursor Agent", "Help Net Security"], "alternates": {"html": "https://wpnews.pro/news/hazmat-open-source-containment-for-ai-agents", "markdown": "https://wpnews.pro/news/hazmat-open-source-containment-for-ai-agents.md", "text": "https://wpnews.pro/news/hazmat-open-source-containment-for-ai-agents.txt", "jsonld": "https://wpnews.pro/news/hazmat-open-source-containment-for-ai-agents.jsonld"}}