Copilot VS Code agent
noneide-extensionRuns local commands with your full privileges, gated only by approval prompts; no built-in sandbox.
documentedVS Code Copilot approvals docs ↗
No OS-level isolation. This agent runs commands with your full user privileges. Its guardrails (approval prompts, allowlists) live inside your trust boundary, wrap it in a boundary you control.
Copilot's VS Code agent mode runs local commands with your full user privileges, gated only by approval prompts, with no built-in sandbox, auto-approve via a chat.tools.terminal.autoApprove regex only widens that. GitHub's guidance is to run it inside Dev Containers yourself.