zlacker

>>speckx+(OP)
If you have ssh installed, with network access it can ssh localhost to escape the sandbox.

>>charci+gM
Don't give it access to your ssh keys!

>>senko+eP
Yes, it should have its own dedicated key instead of sharing one of your own.