Willison maps ChatGPT Work: Work Cloud's code sandbox reaches the open internet

Simon Willison splits ChatGPT Work into Work Cloud, on web and mobile, and Work Local, the desktop app he reads as Codex re-skinned for non-developers. Work Cloud is the substantive one: a code sandbox with internet access open by default, headless Chrome, a filesystem persisted across sessions, sub-agents, and site deploys via Cloudflare Workers. A $20/month subscriber can clone a repo, install its dependencies, and drive live sites from a phone. The same open egress plus 223 registered tools and 44 skills lands it inside Willison's lethal trifecta — private data, untrusted content, and a channel back to an attacker.

Source: simonwillison.net ↗