zlacker

>>speckx+(OP)
I ended up writing my own sandbox so that it works on Mac OS as well and can be used for other tools (but just AI agents) as well

https://github.com/ashishb/amazing-sandbox

>>ashish+Qf1
Curious to know what made you DIY this?

>>ATechG+6h1
Tell me a better alternative that allows me to run, say, 'markdown lint', an npm package, on the current directory without giving access to the full system on Mac OS?

>>ashish+Ih1
sandbox-exec -f curr_dir_access_profile.sb markdownlint

>>ATechG+fj1
So you have to install npm package markdownlint on your machine and let it run it's potentially dangerous postinstall step?

>>ashish+fl1
You can customize curr_dir_access_profile.sb to block access to network/fs/etc. Why is this not enough?

>>ATechG+2r1
Some tools do require Internet access.

Further, I don't even want to take the risk of running 'npm install markdownlint' anymore on my machine.