First impressions of Claude Cowork

kept by eddie jan 18

Hacker News commenters share mixed first impressions of Claude Cowork, with enthusiastic use cases alongside concerns about data privacy and accessibility for non-technical users.

First impressions of Claude Cowork, Anthropic’s general agent
Claude Cowork wraps Claude Code in a sandboxed UI for non-developers, offering general agent capabilities but raising prompt injection concerns.
also on Claude Cowork, #security, Claude Code, Anthropic, #ai-agents, #user-experience
How we contain Claude across products
Anthropic details how it contains AI agent blast radius across three products using sandboxes, VMs, and human-in-the-loop controls, while documenting missed risks like pre-trust code execution and user-mediated prompt injection.
also on Claude Cowork, #security, Claude Code, Anthropic, #ai-agents
the browser is the sandbox
The browser's 30-year-old sandbox model can be adapted to safely run AI agents locally, though gaps remain in network isolation and malicious file creation.
also on Simon Willison, #security, Claude Code, Anthropic, #ai-agents, #ai
the problem isn’t OpenClaw. it’s the architecture.
The article argues that the security risks from AI agent frameworks like OpenClaw are inherent to the architecture of autonomous tool use and marketplaces, not just a single platform.
also on Simon Willison, #security, Anthropic, #ai-agents