Roo Code
noneopen sourceide-extensionRuns local commands with your full privileges, gated only by approval prompts and prefix allow/deny lists.
documentedRoo Code auto-approving actions docs ↗
No OS-level isolation. This agent runs commands with your full user privileges. Its guardrails (approval prompts, allowlists) live inside your trust boundary, wrap it in a boundary you control.
Roo Code runs local commands with your full user privileges, gated only by approval prompts and command-prefix allow/deny lists, with no local OS sandbox. Its isolated-execution story is the separate Roomote cloud product, and the VS Code extension was announced to be sunsetting in 2026.