Cline

noneopen sourceide-extension

Runs local commands with your full privileges, gated only by approval prompts; no local OS sandbox.

No OS-level isolation. This agent runs commands with your full user privileges. Its guardrails (approval prompts, allowlists) live inside your trust boundary, wrap it in a boundary you control.

Cline runs local commands with your full user privileges, gated only by approval prompts, and has no local OS sandbox. There is no first-party isolated execution, only community Docker setups you run yourself.

Sources

cline/cline