This is why I wrote yoloAI
My agents always run with —-dangerously-skip-permissions now, but they can no longer do any harm.
https://github.com/kstenerud/yoloai