hn • r/hackernews
Comment on: Grok CLI uploaded the whole home directory to GCS
I made a tool to solve this problem (at least on Linux, though I believe there's a way to achieve something similar on MacOS):https://github.com/swelljoe/flarIt uses bubblewrap to instantly construct a container around just the agent config, auth and history and the project path. The agent or any command it runs can't reach outside of it even if you tell it to (or, more dangerously, a random prompt injection from the web or some third party library or script that the agent runs).I was using VMs to solve this problem but the temptation to start an agent to work directly on my machine for GUI ap