BitssyBytes logoAgent Safety Score

Directory / Cline

D

Cline

Coding agent (IDE) · Cline · Last checked 2026-10-16

Per-category auto-approve toggles and a YOLO mode. The CLI auto-approves everything by default, but supports a command allow and deny list with deny-first rules.

Overall: D (1.33 avg over 3 verified criteria)

Lock this down first

Run the CLI with --auto-approve false, and set CLINE_COMMAND_PERMISSIONS to a short allow list.

Scorecard

CriterionRatingNotes
Permission granularity2/3Command allow/deny globs in the CLI. In the IDE the model flags which commands need approval.
Human approval gates2/3
Sandboxing0/3Docs suggest throwaway or sandboxed environments. None built in.
Secrets handlingUnverifiedNot confirmed in the docs we checked.
Audit logsUnverifiedNot confirmed in the docs we checked.
Kill switch / interruptUnverifiedNot confirmed in the docs we checked.
Network egress controlUnverifiedNot confirmed in the docs we checked.

Unverified: Secrets handling, Audit logs, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources