AI / OpenClaw Interview Questions
What is the difference between Sandbox Mode off and Docker-based sandboxing in OpenClaw?
| Sandbox Mode off | Docker-based sandboxing |
| Agent runs with the same permissions as the host user account | Agent runs inside an isolated container with restricted OS-level access |
| Lower friction, no container overhead | Adds isolation at the cost of some setup complexity |
| A compromise affects the entire host, including SSH keys and files | A compromise is contained within the sandbox boundary in most cases |
| Reasonable on a fully trusted personal device | Recommended whenever running less-trusted skills or on shared/exposed infrastructure |
The trade-off is really about how much you trust everything the agent might run, on a device you fully control with only vetted skills, disabling sandboxing is a defensible choice, while anything less certain benefits from the isolation Docker-based sandboxing provides.
What happens to a compromise's reach when Sandbox Mode is off?
When is disabling sandboxing considered a defensible choice?
More Related questions...
