AI Agents7 min read
Terminal Security
The '$HOME' trap: AI coding agents need sandboxes, not 'allow?' prompts
Qoder's terminal sandbox blocks close to a hundred destructive agent commands every day. The cases behind those blocks explain why 'allow?' prompts fail: a project folder named $HOME, a cleanup that targeted /root, and a click that nearly cost an entire disk.
2026-08-13