[yogurt0640]

You could try something like this https://github.com/andersonjoseph/jailed-agents

I'm actually moving to containerised isolation. I realised the agents waste too much time trying to correctly install dependencies, not unlike a normal nixos user.