Agent Wranglers

AID-24Required

Skip approvals only in a throwaway sandbox

Skip approvals only inside a container or virtual machine that holds no secrets. Throw it away after the task.

By Agent Wranglers. Updated .

How to do it

Unattended modes run every command without asking. Examples are --dangerously-skip-permissions in Claude Code and --dangerously-bypass-approvals-and-sandbox in Codex. Start them only from a script that creates the container first. Mount only the project folder, allow only the hosts the task needs. Cap the turns and the spend, as in cost and loop limits. Turn the mode off on staff machines through managed settings, where the tool offers them.

Examples

Shell example

grep -rnE 'dangerously-(skip-permissions|bypass-approvals)|bypassPermissions|--yolo' --include='*.sh' --include='*.yml' . \
  | grep -v 'docker run' && exit 1 || exit 0

How to check

A CI script searches the repository for the bypass flags. Each match sits on a line that starts a container, such as docker run. On a staff machine, starting the mode fails.

Sources

For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/ai-assisted-development/isolation-and-credentials/unattended-only-in-sandbox">Agent Wranglers AI-assisted development playbook</a>. In code you write, add a comment next to it with the same link.