Stop Letting AI Agents Touch Your C: Drive

说明与用途

通过在 Windows 中映射专用驱动器字母，AI 代理的工作区被隔离，防止意外修改系统文件。

问题

AI coding agents can access and modify sensitive system files such as .ssh and hosts, potentially deleting the entire C: drive.

结果

By mapping the agent’s workspace to a dedicated drive letter, the agent’s access is limited to that drive, eliminating the risk of accidental system modifications.

工作流

• Map a dedicated drive letter for the agent’s workspace using Windows drive mapping (e.g., subst.scsoi.com for local folders or drive.scsoi.com for WebDAV/cloud).
• Configure the AI agent to use the mapped drive as its workspace.
• Run the agent; it can read/write only within the mapped drive.
• The agent cannot see or modify files outside the mapped drive.
• No additional containers or VMs are required.
• The setup is a one-time purchase and configuration.
• Agents can run indefinitely without risking system integrity.

证据

Your AI coding agent can read your .ssh folder. It can edit your hosts file. It can delete your whole C: drive if it goes wrong.

来源

Map the agents workspace to its own drive letter. Done.

来源

You dont need Docker Desktop. You dont need a VM. You just need Windows drive mapping, which has existed for 30 years.

来源