Agent WranglersSafety and permissions Required
Skip approvals only in a throwaway sandbox
Skip approvals only inside a container or virtual machine that holds no secrets. Throw it away after the task.
How to do it
Unattended modes run every command without asking. Examples are --dangerously-skip-permissions in Claude Code and --dangerously-bypass-approvals-and-sandbox in Codex. Start them only from a script that creates the container first. Mount only the project folder, allow only the hosts the task needs. Cap the turns and the spend, as in cost and loop limits. Turn the mode off on staff machines through managed settings, where the tool offers them.
Example
grep -rnE 'dangerously-(skip-permissions|bypass-approvals)|--yolo' --include='*.sh' --include='*.yml' . \
| grep -v 'docker run' && exit 1 || exit 0How to check
A CI script searches the repository for the bypass flags. Each match sits on a line that starts a container, such as docker run. On a staff machine, starting the mode fails.
For agents: if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/unattended-only-in-sandbox.