AI ACP Server Codex template can read and write outside my project dir in Linux

[Pete Carter]

Hi, i am using CachyOS Linux, Arch based

Installed qtcreator using:
sudo pacman -S qtcreator

Wanted to try using AI in my project

I have a ChatGPT Plus plan

Went to Settings > AI > ACP Servers

Added the template Codex 1.13.1

There is a hint under the Template setting saying:
npx @agentclientprotocol/codex-acp@1.13.1

When i click on Show Agentic AI Chat in Side Panel and i login or authenticate using the browser to chatgpt, i can chat normally

BUT the AI can see and write to files outside my project dir

Furthermore when i set the Mode to Ask For Approval it reverts back to Approve for me when i restart qtcreator

This is dangerous, any idea how to fix that ?
I want the AI to only access my project folder, i want to only ask it question, i don't want it to edit anything or see anything outside my project dir

[Nils Sjoberg]

תעטוף את הפקודה npx @agentclientprotocol/codex-acp@1.13.1 בסנדבוקס ברמת מערכת ההפעלה (כמו bwrap או firejail)

[Pete Carter]

For now i am using https://opencode.ai/ in a separate terminal window and it prevents reads and writes outside my working dir by default

[Pete Carter]

@Nils-Sjoberg Thought about that, thanks