sandbox-exec
No written verdict yet. Here is what commenters said.
5recommend
1warn against
Nov 13, 2025first mention
Oct 13, 2026latest mention
Why people recommend it
“OSX is the best, we use the in-built (seatbelt) sandbox via sandbox-exec.”
“macos also has a native sandbox-exec that can be used to isolate processes with a policy you like.”
Show 3 more
“I use sandbox-exec to isolate execution”
“sandbox-exec (macOS) is probably enough and also much less overhead”
Caveats and dissent
“The sandbox-exec command is DEPRECATED.”
Often compared with
Who recommends it in their own words
Threads where it came up
- Agent Safehouse – macOS-native sandboxing for local agents 4 mentions
- macOS's Little-Known Command-Line Sandboxing Tool 2 mentions
- Running Claude Code dangerously (safely) 2 mentions
- Codex CLI installs a persistent, self-updating background daemon by default 1 mention
- Ask HN: What do you run on a $5 VPS that's worth keeping online 24/7? 1 mention
- hdiutil is deprecated in macOS 27 Golden Gate 1 mention
Data: sandbox-exec.json. Quotes are verbatim; the verdict and theme labels are written by a model from these comments, and every clause links to its sources.
All comments 16
“Right then I used sandbox-exec/safehouse (macOS) and tightened every harness installed”
“I moved to sandbox-exec (safehouse)”
This is only tangentially related, but libuv and mio's Windows implementations use the undocumented AFD readiness-based poll interface [1], since there isn't a documented readiness-based interface on Windows. The undocumented interface is now effectively stable since, among other reasons, Microsoft uses Tokio in some of its products. [1] https://github.com/tokio-rs/mio/blob/master/src/sys/windows/afd.rs
“OSX is the best, we use the in-built (seatbelt) sandbox via sandbox-exec.”
“its a bash wrapper around sandbox-exec”
“UI for sandbox-exec to protect filesystem”
It's kinda funny that I, being skeptical about coding agents and their potential dangers, was interested to give your project a go because I don't trust AI. Yet the first thing I find in your README is that to install your tool I need to trust some random server serve me an .sh file that I will execute in my computer (not sure if with sudo... but still). Come on man, give me a tarball :) EDIT: PS: before someone give
“that you can feed to sandbox-exec directly”
“I made a native macOS app with a GUI for sandbox-exec”
“It is sandbox-exec, worktrees, and COW/overlay filesystem.”
“macos also has a native sandbox-exec that can be used to isolate processes with a policy you like.”
“The sandbox-exec command is DEPRECATED.”
“I use sandbox-exec to isolate execution”
“sandbox-exec (macOS) is probably enough and also much less overhead”
“sandbox-exec on MacOS”
“It's not great, but it's usable.”