Always put things in a container and ensure its safe before using something like AI! I put my opencode agent (with full permissions on an up-to-date debian VM with a DMZ virtual network configuration). If it figures out how to get out, then I'll have fun documenting that at least!