Sandboxing AI Agents with Dev Containers
Coding agents run shell commands with your user's privileges, whether it's Claude Code, Codex, or an open-source harness like OpenCode running against your own models. Their own guardrails have come a long way, but a prompt injection hidden in an open-source package can still turn the agent against your machine. Agents belong in a sandbox, especially when you run a swarm of them.
7 min read ·


