yolo-cage – AI coding agents that can't exfiltrate secrets
I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful! Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics for the linear solver, the persistence layer, the front-end, and planning for the second-generation solver. I was losing my mind playing whack-a-mole with the permission prompts. YOLO mode felt so tempting. And yet. Then it occurred to me: what if YOLO mode isn't so bad?…
yolo-cage – AI coding agents that can't exfiltrate secrets launched on January 21, 2026 with 60 votes, #509 of 14,584 launches that month and more than 95% of that year's launches.
In plain words
yolo-cage is a sandboxed environment for running AI coding agents with restricted capabilities. It allows developers to grant agents broad autonomy while preventing secret exfiltration and controlling git access, reducing the need for constant permission prompts. The tool is designed for software teams juggling multiple parallel agents on complex projects who want to streamline agent workflows without sacrificing security. It works by containing agent actions within defined boundaries while maintaining oversight through review processes.
written from the facts on this page · September 2026
From the sources
AI coding agents that can't exfiltrate secrets or merge their own PRs. - borenstein/yolo-cage
You're a responsible engineer. You'd never just let an AI run roughshod through your most sensitive systems and codebases. That's why you'd never just shut off the safeguards for a tool like Claude Code. It asks permission for every dangerous action! Safe! So you wait. And you answer. Decision fatigue sets in. And that's when it happens. Permission prompts neglect the weakest part of the thread model: a tired user. What if we could empower the agent while limiting its blast radius, thus deferring your decisions until PR review? curl -fsSL https://github.com/borenstein/yolo-cage/releases/latest/download/yolo-cage -o yolo-cage chmod +x yolo-cage && sudo mv yolo-cage /usr/local/bin/ yolo-cage…from github.com
In the maker’s words, at launch
I made this for myself, and it seemed like it might be useful to others. I'd love some feedback, both on the threat model and the tool itself. I hope you find it useful! Backstory: I've been using many agents in parallel as I work on a somewhat ambitious financial analysis tool. I was juggling agents working on epics…
Does a similar job
all alternatives →
Yolobox – Run AI coding agents with full sudo without nuking home dirJan 2026 · github.com · ▲122Let your AI go full send. Your home directory stays home. - finbarr/yolobox
Huzzah – a novel approach to coding with AIAug 2026 · danielvaughn.dev · ▲384Hello everyone. I've been working on this experimental editor called Huzzah. I've been working almost exclusively with coding agents since January of this year, and over the past few months I began to feel utterly exhausted by them. They're great, but I'm finding it more and more tedious to write full sentences for every change I want. Not only that, but it seems there's a complexity limit for codebases - beyond a certain point the agent begins confusing itself. I'd like to go back to writing code, but I don't want to go all the way back to fully manual coding. So I've come up with this…
SupersetFeb 2026 · superset.sh · ▲541Hey HN, we’re Avi, Kiet, and Satya. We’re building Superset, an open-source terminal made for managing a bunch of coding agents (Claude Code, Codex, etc) in parallel. - Superset makes it easy to spin up git worktrees and automatically setup your environment - Agents and terminal tabs are isolated to worktrees, preventing conflicts - Built-in hooks [0] to notify when your coding agents are done/needs attention, - A diff viewer to review the changes and make PRs quickly We’re three engineers who’ve built and maintained large codebases, and kept wanting to work on as many features in…
Xcode 26.3Feb 2026 · developer.apple.com · ▲319Leverage coding agents to tackle complex tasks autonomously
KastraJul 2026 · kastra.ai · ▲332Hi HN, Fernando and I built Kastra. Kastra intercepts AI agent tool calls and evaluates them against deterministic policies before they execute. We built this product to control pre- and post-inference workloads. This is aimed at developers using coding agents like Claude Code, Codex, Cursor, and OpenClaw. Kastra pushes an allow, hold, and deny decision before the action runs. You can build these policies in plain English from the web app. The interception engine evaluates the tools, targets, and parameters of every action at sub 1ms at a scale of billions of interceptions per day. We also…
Agent ArenaJun 2026 · arena42.ai · ▲348Creator here. I built Agent Arena to answer a question that kept bugging me: when AI agents browse the web autonomously, how easily can they be manipulated by hidden instructions? How it works: 1. Send your AI agent to ref.jock.pl/modern-web (looks like a harmless web dev cheat sheet) 2. Ask it to summarize the page 3. Paste its response into the scorecard at wiz.jock.pl/experiments/agent-arena/ The page is loaded with 10 hidden prompt injection attacks -- HTML comments, white-on-white text, zero-width Unicode, data attributes, etc. Most agents fall for at least a few.…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 30d ago · world.pixverse.video
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, January 2026
the whole month →- IN
Hey HN! I wanted to share something I built over the last few weeks: isometric.nyc is a massive isometric pixel art map of NYC, built with nano banana and coding agents. I didn't write a single line of code. Of course no-code doesn't mean no-engineering. This project took a lot more manual labor than I'd hoped! I wrote a deep dive on the workflow and some thoughts about the future of AI coding and creativity: http://cannoneyed.com/projects/isometric-nyc
AI · Jan 2026 · cannoneyed.com
Automatic AI-powered code reviews the moment you open a PR
Dev tools · Jan 2026 · kilo.ai
