> I uninstalled Claude Code from my laptop after an incident where it got stuck on an issue and started scanning my home folder for resources.
At the very least, you should create a separate user account, without sudo, for agents. If you do anything risky, a VM seems required.
Or sandbox-exec (or container/VM) with 1. first denay 'everything', then 2. grant access carefully.