Hacker News new | past | comments | ask | show | jobs | submit
arthurcolle | on: Goldman Sachs is pulling Claude Code from its bankers and traders
I do this at the tool registry layer but this is a good idea for the agent sandbox itself
jacquesm | parent
If you give access to bash, cc or wget then you're wide open, no matter how much you tell yourself you're safe.
deadbabe | root | parent
You’re not “wide open”. Having access to bash doesn’t help if your traffic physically cannot go anywhere except to proxies you control and regulate the traffic.