I am a professional LLM code tester. I cannot say much more due to my NDA, but if you are very concerned I would run it in a docker container at the very least. That being said, I highly suggest reviewing the code carefully before running it. Even a look at say python imports might tell you what the code can potentially do if you see it importing the os module. I've run advanced code agents in vs code using their unrestricted access settings while in a docker container. At first it was scary, then I started using that time to refill my coffee. My computer is still running fine.
There's a risk but imo think there's some overreaction. Plus should keep backups anyway. Have had few disks failing on me that fear to have any important data with single copy. If want to be on the safe side though: Create container/VM. Do agentic work inside. Git commit/push outside often/every-step.
I am a professional LLM code tester. I cannot say much more due to my NDA, but if you are very concerned I would run it in a docker container at the very least. That being said, I highly suggest reviewing the code carefully before running it. Even a look at say python imports might tell you what the code can potentially do if you see it importing the os module. I've run advanced code agents in vs code using their unrestricted access settings while in a docker container. At first it was scary, then I started using that time to refill my coffee. My computer is still running fine.
Looking at the imports is very good advice, thanks.
Today in first page: https://blog.emilburzo.com/2026/01/running-claude-code-dange... (discussion: https://news.ycombinator.com/item?id=46690907).
There's a risk but imo think there's some overreaction. Plus should keep backups anyway. Have had few disks failing on me that fear to have any important data with single copy. If want to be on the safe side though: Create container/VM. Do agentic work inside. Git commit/push outside often/every-step.