Sandboxing of agents

[mangas]

It would be great to support the local running agents through sandboxing by default. It's a pretty big attack vector to run potentially proprietary code.

Would be great if the current support for gemini, codex and claude code had an option to run in containers with a volume mounted to on the project root or a pre-defined root. Is there a reason this couldn't work? I understand this can probably be achieved by defining "external agents" by hand, but that would only bring benefits to a very very small number of users vs making that the default.