An ephemeral container sandbox for coding agents, endorsed for limiting filesystem exposure.
Source discussion: Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
“I run it in an ephemeral container sandbox (https://github.com/ashishb/amazing-sandbox) which has access to the current working directory and it drastically limits the attack radius.”
ashishb · recommendation · first hand use
Direct HN comment