# Agent Safehouse

Hacker Approved page: https://hackerapproved.com/p/agent-safehouse/

36 people recommended Agent Safehouse in Hacker News comments, 5 had mixed feelings and 1 criticized it, November 2025 to October 2026. It was recommended in 7 of 12 months, in 12 threads. It does not meet the Hacker Approved badge rule.

29 of the 36 people who recommend it commented in one thread, “Agent Safehouse – macOS-native sandboxing for local agents”.

**Verdict:** Free shell-script wrapper around macOS sandbox-exec that restricts coding agents to the current folder; people value its transparency and simplicity. Main caveat: it only works on macOS.

Summary written by Claude from 43 comments. It was written before the November 2026 recount, and 40 of those comments still count.

## Why people recommend it

- Restricts agents to the current folder (3 comments in the sample): "hides and protects your filesystem from the agent CLI - it cannot read/write/delete anything outside of the current folder" ([source](https://news.ycombinator.com/item?id=49261756)) "use built-in sandboxing to jail Claude (and every other agent) to $CWD so it doesn’t read/write anything it shouldn’t" ([source](https://news.ycombinator.com/item?id=47058380)) "I made a local sandbox to jail all TUI clunkers to $CWD and run all of them in —-yolo mode" ([source](https://news.ycombinator.com/item?id=47150119))
- Simple, transparent, few dependencies (3 comments in the sample): "IMO, that's the best part about the project - no dependencies, no fancy tech, no virtualization." ([source](https://news.ycombinator.com/item?id=47301472)) "can use the Policy Builder to generate a static policy file with minimal permissions" ([source](https://news.ycombinator.com/item?id=47303384)) "the transparency of what your thing does is really great" ([source](https://news.ycombinator.com/item?id=47306285))
- Built on native sandbox-exec (3 comments in the sample): "The macOS sandbox approach is smart because it leverages the OS-level enforcement rather than relying on application-layer restrictions" ([source](https://news.ycombinator.com/item?id=47306213)) "You don’t actually need to install anything and can just generate a text file with the security profile for sandbox-exec." ([source](https://news.ycombinator.com/item?id=47303906)) "Well maintained and is built on existing sandbox-exec so you are not locked in" ([source](https://news.ycombinator.com/item?id=48737544))
- Works with any agent (2 comments in the sample): "I wanted something that offers strong guarantees across all agents" ([source](https://news.ycombinator.com/item?id=47306251)) "it works for any agent and has many sane default for developers" ([source](https://news.ycombinator.com/item?id=47551119))

## Other sandboxing tools people recommend

- [Bubblewrap (bwrap)](https://hackerapproved.com/p/bubblewrap/): 85 recommend, 19 mixed, 28 criticize
- [nono](https://hackerapproved.com/p/nono/): 24 recommend, 4 mixed, 3 criticize
- [Firejail](https://hackerapproved.com/p/firejail/): 20 recommend, 6 mixed, 6 criticize
- [sandbox-exec](https://hackerapproved.com/p/sandbox-exec/): 14 recommend, 5 mixed, 6 criticize

## The badge

A product earns the Hacker Approved badge when at least 10 people recommend it, recommenders outnumber critics at least 2 to 1 (mixed feelings count toward neither side), it was recommended in at least 4 of the 12 months and in at least 5 different threads, and no single thread supplies more than half of the people who recommend it. Health and money products are never badged.

## Cite as

Hacker Approved, "Agent Safehouse", https://hackerapproved.com/p/agent-safehouse/ (36 recommend, 5 mixed, 1 criticize; Hacker News comments, November 2025 to October 2026).

Counts updated 2 Nov 2026, with data through October 31, 2026.