# agent: Sandbox security review and docs update \(\#60291\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/8f92822cbfb41db7fc282ad19093caa662815aa1)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 8f92822cbfb41db7fc282ad19093caa662815aa1

Requested commit: 8f92822cbfb41db7fc282ad19093caa662815aa1

Commit: 8f92822cbfb41db7fc282ad19093caa662815aa1

Tree: 01fbaa74ee6a60f7ad1de3b8f906f0adbc83aed1

Author: Cameron Mcloughlin

Committer: GitHub

## Message

```
agent: Sandbox security review and docs update (#60291)

Closes security loopholes and updates docs:
- installs seccomp filter for blocking naughty syscalls
- tightens macos seatbelt profile
- fetch tool responses that redirect are now constrained by allowed
domains list

Also adds a few "Learn More" buttons that link to the new docs.

Also fixes a bug where the agent would try to create a
`~/.config/zed/AGENTS.md` directory

Also adds unicode confusable detection to URL/path privilege escalation
prompts.

---

Release Notes:

- N/A or Added/Fixed/Improved ...

---------

Co-authored-by: zed-zippy[bot] <234243425+zed-zippy[bot]@users.noreply.github.com>
```

## Parents

- [7344a31ddc144f12bd8ee52328cfb9bd275c97f5](https://git.cafe/gitcafe/zed/commit/7344a31ddc144f12bd8ee52328cfb9bd275c97f5?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/8f92822cbfb41db7fc282ad19093caa662815aa1?format=markdown)