borenstein/yolo-cage
View on GitHub ↗ ★ 109 Python archived
AI coding agents that can't exfiltrate secrets or merge their own PRs.
6 mentions on Hacker News by 3 people: 2 stories, 4 comments · first 2026-01-13 · latest 2026-01-21
20082026
-
…like secret scanning is outsourced by the proxy to LLM-Guard right now, which is configured here: https://github.com/borenstein/yolo-cage/blob/d235fd70cb8c2b4... Here's the LLM Guard image it uses: https://hub.docker.com/r/laiyer/llm-guard-…
comment by simonw · 2026-01-21 · in Show HN: yolo-cage – AI coding agents that can't exfiltrate secrets -
…that filtering a few specific (listed) commands will actually give any sort of safety guarantees? https://github.com/borenstein/yolo-cage/blob/main/docs/archi...
comment by snowmobile · 2026-01-21 · in Show HN: yolo-cage – AI coding agents that can't exfiltrate secrets -
▲ 60
Show HN: yolo-cage – AI coding agents that can't exfiltrate secretsstory by borenstein · 2026-01-21 · 76 comments
-
▲ 1
yolo-cage: AI coding agents that can't exfiltrate secrets or merge their own PRsstory by borenstein · 2026-01-13 · 0 comments
-
…more to do with secret exfiltration and blast radius. I'd love some feedback if you have a chance! https://github.com/borenstein/yolo-cage
comment by borenstein · 2026-01-13 · in Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dir -
This is great - I've been working on a related but different approach called yolo-cage ( https://github.com/borenstein/yolo-cage ) that addresses a different threat model. Yolobox protects your local machine from accidental damage (crucial…
comment by borenstein · 2026-01-13 · in Show HN: Yolobox – Run AI coding agents with full sudo without nuking home dir