开发者对比 Plimsoll 与 exe.dev 两种 AI 代码沙箱方案
Show HN: Plimsoll, a self-hosted sandbox for code your AI agent writes
一位开发者在 Hacker News 上讨论 Show HN 项目 Plimsoll（自托管的 AI 代码沙箱），并将其与 exe.dev 提供的远程隔离 SSH 沙箱做对比。他表示自己正在构建的方案目标是确保 AI agent 不会恶意或愚蠢地读写本机个人数据，认为配合反向代理屏蔽 API token 后，exe.dev 已足够满足需求。
How does this compare to using something like exe.dev where you get remote isolated sandboxes over SSH, and assume you add in an http credential injection reverse proxy (bring your own)?
I'm building something that will give me peace of mind that my agents will (whether maliciously or stupidly) not negatively read/write the personal data on my machine. To me, exe.dev (with possibly a reverse proxy to preclude the agent from ever having access to my API tokens) is sufficient.
来源：Hacker News · 首页 · news.ycombinator.com