Unverified50% confidenceFactExact time
Claude Code's built-in sandbox is disabled by default and primarily constrains commands and the subprocesses they launch; an approved execution does not mean access to anywhere is permitted
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/6/2026
First Seen
Valid until: 1/4/2027
Sources
Related Entities
Related Claims
UnverifiedOut of the box, Claude Code by default can only access one code repository and one shell.72% similarUnverifiedClaude Code's permission mechanism consists of three mutually independent yet combinable parts: the mode determines how actions are approved, rules specify which tool calls are allowed/asked about/denied, and the sandbox restricts the files and network that commands can actually access71% similarUnverified可以通过在Claude Code输入框中输入/hooks命令来管理已有的Hooks，支持检查、删除、编辑、禁用等操作71% similarUnverifiedIn Docker Sandboxes, even when Claude Code is granted full permissions, all escape tests (listing desktop files, reading Chrome Cookies, etc.) failed, and Claude Code was confined within the sandbox.71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/981565API
curl https://kongchang.com/api/v1/knowledge/claims/981565MCP
get_claim(id=981565)