Aider

Coding agent (CLI) · Aider (open source) · 2/7 verified · Last checked 2026-10-16

Commits every edit to git, so /undo is the main safety net. We found no documented sandbox or command allowlist. By default it skips pre-commit hooks.

Overall: Unverified (2/7 controls verified; a grade needs at least 3)

Lock this down first

Pass --git-commit-verify so your pre-commit secret scanners actually run.

Scorecard

Criterion	Rating	Notes
Permission granularity	Unverified	Not confirmed in the docs we checked.
Human approval gates	Unverified	Not confirmed in the docs we checked.
Sandboxing	0/3	No sandbox described in the docs we read. Run it in a container.
Secrets handling	Unverified	Not confirmed in the docs we checked.
Audit logs	2/3	Every change becomes a git commit with a message.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Permission granularity, Human approval gates, Secrets handling, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

https://aider.chat/docs/git.html

Vendor? Request a correction. We review corrections within 7 days.