Executing coding agents from the shell or your desktop executes commands with your user's privileges. Their own guardrails have come a long way, but a prompt injection can hide in many places - open-source packages, images with invisible text, which only the agent reads, harmful instructions inside searched pages, the list goes on.

This article covers the most basic setup of sandboxing a local agent for daily tasks inside a dev container.