Filesystem isolation is particularly important in preventing a prompt-injected Claude from modifying sensitive system files; network isolation prevents a prompt-injected Claude from leaking sensitive information or downloading malware.
full item
Filesystem isolation is particularly important in preventing a prompt-injected Claude from modifying sensitive system files; network isolation prevents a prompt-injected Claude from leaking sensitive information or downloading malware.
summary
The two boundaries exist specifically as a defense against prompt-injection attacks attempting to escape the working directory or exfiltrate data.
source
Making Claude Code more secure and autonomous with sandboxinghttps://www.anthropic.com/engineering/claude-code-sandboxing
provenance
created 2026-07-02 06:02:48 · JSON