Enable Bash sandboxing to auto-allow contained commands

Terminal / Productivity / Cost Optimization·13 hours ago·verified 13 hours ago·medium·~15 min setup·verified

Turn on `/sandbox` so OS-level filesystem and network boundaries replace many per-command Bash prompts.

#sandbox #permissions #bash #security

The problem

Default mode prompts on every shell command, slowing tight edit-test loops.

The hack

Enable sandbox mode on supported platforms so sandboxed commands auto-run inside the defined boundary.

Why it works

Sandboxing is not a permission mode—it restricts what Bash can touch, letting safe commands proceed automatically.

Setup

1. Run `/sandbox` and follow the setup for your OS. 2. Define allowed filesystem roots and network domains carefully. 3. Confirm a simple `ls`/`rg` runs without a prompt while a disallowed network call still gates. 4. Combine with permission deny rules for defense in depth.

Prompt

/sandbox

Additional details

Use with auto mode thoughtfully; understand what each layer actually approves.

Source

anthropic·View original →·by Anthropic Docs

Does this still work?

Discussion

No comments yet. Be the first to say whether this worked for you.