Developer probes Claude Code sandbox limits with the srt CLI
10/20/2026 — 10/20, 00:18·1 sources (all)·1 reports (all)
Key takeaways
- Claude Code's sandbox is built on the open-source npm package @anthropic-ai/sandbox-runtime, which ships an srt CLI that can run standalone.…
Background & analysis
On October 20, 2026, a DEV Community post reported that Claude Code's sandbox is built on the open-source npm package @anthropic-ai/sandbox-runtime, which ships with a standalone CLI called srt. According to the author, turning on the sandbox and asking Claude to run cat ~/.ssh/known_hosts still lets the command through. The post argues this is not a bug: Claude Code's sandboxing documentation states that, unless a path is explicitly denied, a sandboxed command can read most of the machine, including credential files such as ~/.ssh and ~/.aws/credentials. The author suggests readers wrap arbitrary commands with srt to observe how different levels of interception behave. The report ends at this hands-on test and the documentation's wording; it does not describe any subsequent fix or official response.
AI-generated from 1 reports · updated 1 hour ago
Latest turnClaude Code's sandbox is built on the open-source @anthropic-ai/sandbox-runtime npm package, which includes a standalone CLI called srt. The author notes that sandboxed commands can still read credential files such as ~/.ssh unless those paths are explicitly denied. Developers can wrap any command with srt to see which layer blocks what.
Related AI tools
- Heat index
- 96
- All sources
- 1
- All reports
- 1
- First seen
- 1 hour ago
Reports on this story headlines open the original
Claude Code's sandbox is built on the open-source @anthropic-ai/sandbox-runtime npm package, which includes a standalone CLI called srt. The author notes that sandboxed commands can still read credential files such as ~/.ssh unless those paths are explicitly denied. Developers can wrap any command with srt to see which layer blocks what.
DEV Community · AIAI score 68
Other stories people are talking about
- Heat index 76Developer pins Claude Code and Codex model tiers by task type1 sources
- Heat index 66Developer shares a spec-driven development workflow with Claude Code1 sources
- Heat index 47Developer shares refactoring workflow combining ast-grep codemods with Claude Code1 sources
- Heat index 38Developer shares Claude Code workflow with local MCP shared memory1 sources
- Heat index 31Developer logs 225B Claude Code tokens in 30 days1 sources
How is heat calculated?About the methodHide
Heat counts how many independent sources covered a story in the last 48 hours: one source counts once no matter how many posts it published, decaying with a 24-hour half-life. What ranks first is what many people are talking about.
This page aggregates public feeds. Headlines and summaries are machine-organized and remain the property of the original authors; verify important facts at the source. If you believe a headline or summary infringes your rights, email the contact address in the footer with the page URL and basis of your claim, and we will remove or replace it after review.
- Surge
- Discussion rising fast
- New
- First report within 6 hours
- Rising
- Still gathering discussion