Opt into Claude Code's open source sandbox runtime to improve safety while reducing permission prompts.
Run /sandbox to enable it. Sandboxing runs on your machine and supports both file and network isolation.
6/ Enable Sandboxing
When this pattern helps
Apply the least privilege needed for the task. Separate read-only inspection from mutation, keep destructive actions behind explicit approval, and inspect the effective permissions rather than relying on a setting name alone.
权限只给完成任务所必需的范围。把只读检查与写入操作分开，破坏性动作必须显式确认，并检查最终生效的权限，而不只看设置名称。