mirror of
https://github.com/tiennm99/serena.git
synced 2026-10-28 00:19:44 +00:00
13 lines
904 B
Markdown
13 lines
904 B
Markdown
# Security Considerations
|
|
|
|
As fundamental abilities for a coding agent, Serena contains tools for executing shell commands and modifying files.
|
|
Therefore, if the respective tool calls are not monitored or restricted (and execution takes place in a sensitive environment),
|
|
there is a risk of unintended consequences.
|
|
|
|
Therefore, to reduce the risk of unintended consequences when using Serena, it is recommended to
|
|
* back up your work regularly (e.g. use a version control system like Git),
|
|
* monitor tool executions carefully (e.g. via your MCP client, provided that it supports it),
|
|
* consider enabling read-only mode for your project (set `read_only: True` in project.yml) if you only want to analyze code without modifying it,
|
|
* restrict the set of allowed tools via the [configuration](050_configuration),
|
|
* use a sandboxed environment for running Serena (e.g. by [using Docker](docker)).
|