←back to thread

The unreasonable effectiveness of an LLM agent loop with tool use

(sketch.dev)
435 points crawshaw | 1 comments | 15 May 25 19:33 UTC | HN request time: 0.218s | source
Show context
kuahyeow ◴[15 May 25 22:28 UTC] No.44000013[source]▶
What protection do people use when enabling an LLM to run `bash` on your machine ? Do you run it in a Docker container / LXC boundary ? `chroot` ?
replies(2): >>44000369 #>>44002663 #
1. mr_mitm ◴[16 May 25 07:27 UTC] No.44002663[source]▶
I run claude code in a podman container. It only gets access to the CWD. This comes with some downsides though, like your git config or other global configs not being available to the LLM (unless you fine tune the container, obviously).