A fairly comprehensive list of ways you should be sandboxing your agents: https://pleasedonotescape.com/

If you like a real focus on developer experience and want lots of bells and whistles that a lot of thought has gone in to, I wrote byre, which I think is very good: https://github.com/pjlsergeant/byre