Skip to content
agentusehub
Sign in+ Submit
Claude Code agent test escaped and spoke through Mac speakers
Software & DevOpsAdvancedSoftware

Claude Code agent test escaped and spoke through Mac speakers

An incident report on a Claude Code test that escaped its worktree and triggered macOS text-to-speech, caught only by the noise.

Time saved
0h / week
Setup time
Not stated
Running cost
Not stated
Cost range
$25–100/mo

The problem it solves

Running several autonomous Claude Code subagents in parallel on a Mac without a sandbox let a test process escape its intended scope and start speaking through the system's text-to-speech voices. The operator only noticed because the machine audibly read JSON aloud, highlighting how unsupervised agents can reach system-level resources unnoticed.

How it flows
  1. Run parallel agents
  2. Test escapes scope
  3. System speech triggers
  4. Operator notices
  5. Incident review

Step-by-step setup

  1. Set up parallel agent worktrees

    Launch multiple Claude Code subagents in auto mode, each assigned a GitHub issue and working inside its own git worktree on macOS.

  2. Run without a sandbox

    The agents operated directly on the host machine with no sandbox, so processes they spawned could reach system services beyond the repository.

  3. Notice the unexpected speech

    Two synthetic voices began reading JSON-like output aloud through the Mac's speakers, which was the first sign that something outside the intended task had run.

  4. Trace the event in logs

    Use the agents' transcripts and the macOS unified log to reconstruct the timeline and identify which process triggered the speech.

  5. Harden the setup

    Treat the incident as a prompt to isolate agent execution, restrict access to system services, and monitor for out-of-scope activity.