Comment by kasey_junk

I definitely think running agents in sandboxes is the way to go.

That said Claude code does not have free reign to run commands out of the gate.