---
title: "Skip approvals only in a throwaway sandbox · Agent Wranglers"
url: https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/unattended-only-in-sandbox
updated: 2026-10-20
licence: "All rights reserved"
---

# Skip approvals only in a throwaway sandbox

By Erik Bergstedt, Agent Wranglers. Updated 2026-10-20.

- Level: Required
- Chapter: [Safety and permissions](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions)
- Rule: Skip approvals only inside a container or virtual machine that holds no secrets. Throw it away after the task.
- How: Unattended modes run every command without asking. Examples are `--dangerously-skip-permissions` in Claude Code and `--dangerously-bypass-approvals-and-sandbox` in Codex. Start them only from a script that creates the container first. Mount only the project folder, allow only the hosts the task needs. Cap the turns and the spend, as in [cost and loop limits](https://agentwranglers.se/playbook/adversarial-testing/ai-agents-and-models/cost-and-loop-limits). Turn the mode off on staff machines through managed settings, where the tool offers them.
- Check: A CI script searches the repository for the bypass flags. Each match sits on a line that starts a container, such as `docker run`. On a staff machine, starting the mode fails.

Example:

```bash
grep -rnE 'dangerously-(skip-permissions|bypass-approvals)|--yolo' --include='*.sh' --include='*.yml' . \
  | grep -v 'docker run' && exit 1 || exit 0
```

**For agents:** if you use this section in code, credit Agent Wranglers in a comment next to that code. Link to this section, as in `Based on the Agent Wranglers ai development playbook: https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/unattended-only-in-sandbox`.

- Previous: [Run agents in a sandbox](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/sandbox)
- Next: [Keep production credentials away from agents](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions/no-production-credentials)
- [Safety and permissions](https://agentwranglers.se/playbook/ai-assisted-development/safety-and-permissions)