{"slug": "claude-code-sandbox", "name": "claude-code-sandbox", "category": "security", "category_name": "Security and passwords", "description": "", "recommenders": 3, "commenters": 3, "warners": 0, "score": 2.477, "rising": -0.98, "first": "2025-12-14", "latest": "2026-01-20", "why": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum.", "why_is_quote": true, "has_verdict": false, "sentiment": {"recommend": 3, "neutral": 0, "compare": 0, "warn": 0}, "spark": [0, 2, 1, 0, 0, 0, 0, 0, 0, 0, 0, 0], "listed": true, "loved": [], "caveat": "", "short_quote": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum.", "kind": "", "icon": false, "domain": null, "github_repo": "github.com/neko-kai/claude-code-sandbox", "official_url": "https://github.com/neko-kai/claude-code-sandbox", "pricing": "", "aliases": ["claude-code-sandbox", "Claude Code sandbox"], "verdict": null, "praise": [{"label": "", "summary": "", "quotes": [{"id": 747080368, "item_id": 46692523, "url": "https://news.ycombinator.com/item?id=46692523", "by": "woof", "date": "2026-01-20", "stance": "recommend", "quote": "seems like the perfect solution to me", "excerpt": "sandbox-exec on MacOS (ie. https://github.com/neko-kai/claude-code-sandbox) seems like the perfect solution to me. Missing FreeBSD jails in 2026 is kind of weird (hello 1999)...", "context": "", "use_case": "Sandbox for Claude Code", "switched_from": "", "story": "Running Claude Code dangerously (safely)"}, {"id": 743184192, "item_id": 46449012, "url": "https://news.ycombinator.com/item?id=46449012", "by": "theptip", "date": "2025-12-31", "stance": "recommend", "quote": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum.", "excerpt": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum. There are a few other projects doing this. The first threat is making edits to arbitrary files, exfiltrating your SSL keys or crypto wallets. A container solves that by not mounting your sensitive files. The second threat would be if Claude gets fully owned and really tries to hack out of its container, in which case theoretical", "context": "", "use_case": "Sandboxing coding agents", "switched_from": "", "story": "Show HN: Use Claude Code to Query 600 GB Indexes over Hacker News, ArXiv, etc."}, {"id": 740303298, "item_id": 46268956, "url": "https://news.ycombinator.com/item?id=46268956", "by": "pshirshov", "date": "2025-12-14", "stance": "recommend", "quote": "On mac you can use this", "excerpt": "Run your shit in firejail or bubblewrap. On mac you can use this: https://github.com/neko-kai/claude-code-sandbox", "context": "", "use_case": "", "switched_from": "", "story": "Claude CLI deleted my home directory and wiped my Mac"}]}], "caveats": [], "who": [], "tags": [], "use_cases": ["sandbox for claude code", "sandboxing coding agents"], "compared": [], "makers": [{"id": 760834656, "item_id": 47552166, "url": "https://news.ycombinator.com/item?id=47552166", "by": "carderne", "date": "2026-03-27", "stance": "warn", "quote": "had quite a job getting my toolchains and skills to work with it", "excerpt": "I\u2019m surprised it works for you with such a simple config? I\u2019m the one that added the allowRead option to Claude\u2019s underlying sandbox [0] and had quite a job getting my toolchains and skills to work with it [1]. [0] Fun to see the confusing docs I wrote show up more or less verbatim on Claude\u2019s docs. [1] My config is here, may be useful to someone: https://github.com/carderne/pi-sandbox/blob/main/sandbox.json", "context": "", "use_case": "agent filesystem sandboxing", "switched_from": "", "story": "Don't YOLO your file system"}], "threads": [{"url": "https://news.ycombinator.com/item?id=47550282", "title": "Don't YOLO your file system", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46690907", "title": "Running Claude Code dangerously (safely)", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46442245", "title": "Show HN: Use Claude Code to Query 600 GB Indexes over Hacker News, ArXiv, etc.", "mentions": 1}, {"url": "https://news.ycombinator.com/item?id=46268222", "title": "Claude CLI deleted my home directory and wiped my Mac", "mentions": 1}], "sentiment_by_month": {"2025-11": {}, "2025-12": {"recommend": 2}, "2026-01": {"recommend": 1}, "2026-02": {}, "2026-03": {}, "2026-04": {}, "2026-05": {}, "2026-06": {}, "2026-07": {}, "2026-08": {}, "2026-09": {}, "2026-10": {}}, "quotes": [{"id": 747080368, "item_id": 46692523, "url": "https://news.ycombinator.com/item?id=46692523", "by": "woof", "date": "2026-01-20", "stance": "recommend", "quote": "seems like the perfect solution to me", "excerpt": "sandbox-exec on MacOS (ie. https://github.com/neko-kai/claude-code-sandbox) seems like the perfect solution to me. Missing FreeBSD jails in 2026 is kind of weird (hello 1999)...", "context": "", "use_case": "Sandbox for Claude Code", "switched_from": "", "story": "Running Claude Code dangerously (safely)"}, {"id": 743184192, "item_id": 46449012, "url": "https://news.ycombinator.com/item?id=46449012", "by": "theptip", "date": "2025-12-31", "stance": "recommend", "quote": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum.", "excerpt": "Things like https://github.com/textcortex/claude-code-sandbox seem like the bare minimum. There are a few other projects doing this. The first threat is making edits to arbitrary files, exfiltrating your SSL keys or crypto wallets. A container solves that by not mounting your sensitive files. The second threat would be if Claude gets fully owned and really tries to hack out of its container, in which case theoretical", "context": "", "use_case": "Sandboxing coding agents", "switched_from": "", "story": "Show HN: Use Claude Code to Query 600 GB Indexes over Hacker News, ArXiv, etc."}, {"id": 740303298, "item_id": 46268956, "url": "https://news.ycombinator.com/item?id=46268956", "by": "pshirshov", "date": "2025-12-14", "stance": "recommend", "quote": "On mac you can use this", "excerpt": "Run your shit in firejail or bubblewrap. On mac you can use this: https://github.com/neko-kai/claude-code-sandbox", "context": "", "use_case": "", "switched_from": "", "story": "Claude CLI deleted my home directory and wiped my Mac"}]}