When many Claude agents work together, a single agent that is tricked by hidden instructions can pass those instructions on to all the others. This post explains what a sandbox protects in a group of agents, which kinds of isolation exist from a simple command filter to a separate virtual machine, how to configure them in Claude Code, and which setups work well in practice.