This guide configures three coding agents around the same target policy:
| Action | Desired behavior |
|---|---|
| Read files inside the current working directory | Allow |
| Read files outside the current working directory | Ask |
| Run any shell command | Ask |
Guilherme Salazar gszr
gszr
/ coding-agent-sandbox-configs.md
Created
July 13, 2026 12:34
Recommended sandbox configurations for Claude Code, Codex, and OpenCode
gszr
/ plugin.yml
Created
December 18, 2025 14:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| plugins: | |
| - tags: ~ | |
| protocols: | |
| - grpc | |
| - grpcs | |
| - http | |
| - https | |
| consumer_group: ~ | |
| route: ~ | |
| ordering: ~ |
gszr
/ 3.12-scout.md
Created
November 18, 2025 19:05
│ Analyzed Image
────────────────────┼─────────────────────────────────────────────
Target │ kong/kong-gateway:3.12-ubuntu
digest │ ec5f69f0caa4
platform │ linux/arm64
provenance │ https://github.com/Kong/kong-ee
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", | |
| "bomFormat": "CycloneDX", | |
| "specVersion": "1.6", | |
| "serialNumber": "urn:uuid:e230a712-81a9-48e7-9d9c-3ea7c53520fd", | |
| "version": 1, | |
| "metadata": { | |
| "timestamp": "2025-11-11T11:44:05-03:00", | |
| "tools": { | |
| "components": [ |
gszr
/ rusty.patch
Created
October 21, 2025 13:08
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| diff --git i/src/run.rs w/src/run.rs | |
| index c978e6a..8e61cf7 100644 | |
| --- i/src/run.rs | |
| +++ w/src/run.rs | |
| @@ -53,54 +53,13 @@ pub(crate) fn run(mut cmd: Command) -> i32 { | |
| } | |
| }; | |
| - let old_mask = mask | |
| - .thread_swap_mask(SIG_BLOCK) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| require "luarocks.loader" | |
| setmetatable(_G, nil) | |
| local config = { | |
| application_name = "kong", | |
| host = "localhost", | |
| port = 5432, | |
| user = "kong", | |
| password = nil, |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "datakit", | |
| "config": { | |
| "nodes": [ | |
| { | |
| "name": "DATA", | |
| "type": "call", | |
| "url": "http://<callout server>:8080/uuid", | |
| "outputs": { | |
| "body": "service_request.headers" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "request-callout", | |
| "config": { | |
| "callouts": [ | |
| { | |
| "name": "simple", | |
| "request": { | |
| "url": "https://<callout server>:8080/anything", | |
| "method": "GET" | |
| } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "request-callout", | |
| "config": { | |
| "callouts": [ | |
| { | |
| "name": "c1", | |
| "request": { | |
| "url": "https://httpbin.org/anything", | |
| "method": "POST", | |
| "body": { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| { | |
| "name": "request-callout", | |
| "config": { | |
| "callouts": [ | |
| { | |
| "name": "c1", | |
| "request": { | |
| "url": "https://mocki.io/v1/3b51613b-a7e0-44bf-803a-35f6939e55f3", | |
| "method": "GET" | |
| }, |
NewerOlder