Skip to content

You're one bad prompt away from rm -rf ~

Without a sandbox
zsh
$ claude --dangerously-skip-permissions
Claude> I'll reorganize your files...
$ rm -rf ~/*
$ ls ~/.ssh
No such file or directory
$ ls ~/Documents
No such file or directory
You> Wtf Claude you deleted everything!
Claude> You're absolutely right!
With yolobox
yolobox
$ yolobox claude
Claude> I'll reorganize your files...
$ rm -rf ~/*
# nuked the container's home. oh well.
$ exit
# back on the host:
$ ls ~/.ssh
id_ed25519 config # safe
You> 😎

Let your AI go full send. Your home directory stays home.

yolobox gives the agent full permissions inside a container while keeping the important host boundaries intact.

Project mounted at its real path
Full permissions and sudo inside the box
Home directory not mounted by default
Persistent volumes keep tools and state across runs
01

Mount your project

Your project directory is mounted at its real host path for seamless session continuity. /Users/you/project inside equals /Users/you/project outside.

02

Isolate everything else

Your home directory is never mounted. SSH keys, credentials, cloud configs, dotfiles, other projects — all invisible to the agent.

03

Let the AI cook

Full sudo access, persistent named volumes, pre-installed tools. The agent installs anything it needs. Sessions survive restarts.

Two commands. That's it.

zsh
# Install
$ brew install finbarr/tap/yolobox
 
# Run from any project
$ cd /path/to/your/project
$ yolobox claude # or codex, gemini, copilot
Or use the install script: curl -fsSL https://raw.githubusercontent.com/finbarr/yolobox/master/install.sh | bash

Every AI, full auto

Claude Code
yolobox claude
--dangerously-skip-permissions
OpenAI Codex
yolobox codex
--dangerously-bypass-approvals-and-sandbox
Gemini CLI
yolobox gemini
--yolo
GitHub Copilot
yolobox copilot
--yolo
OpenCode
yolobox opencode
runs natively
It's the AI's box, not yours. You launch the agent and let it work. It has sudo — if it needs a compiler, database, or framework, it just installs it.

Released under the MIT License.