Auto mode knows it's dangerous (and does it anyway)
2 experts are actively discussing the implications.
“Ask a coding agent to run a curl-pipe-sh install command and it will — even if it notices the danger. I thought auto mode would protect you from this sort of danger but it doesn't: both Claude and Codex deliberately disable the sandbox. Read more at: tidyde…”