logoalt Hacker News

dbmikus • yesterday at 10:15 PM • 1 reply • view on HN

I like that it's all bash.

How does this compare with Codex's and Claude's built-in sandboxing?

Replies

e1g • yesterday at 10:23 PM

Claude: can escape its sandbox (there are GitHub issues about this) and, when sandboxed, still has full read access to everything on your machine (SSH keys, API keys, files, etc.)

Codex: IIRC, only shell commands are sandboxed; the actual agent runtime is not.

➕ show 1 reply