logoalt Hacker News

suchartoday at 8:38 AM0 repliesview on HN

This is not privilege separation/sandboxing. Separate virtual machine for an agent with limited credentials is reasonably safe approach