diff --git a/content/manuals/ai/sandboxes/security/isolation.md b/content/manuals/ai/sandboxes/security/isolation.md
index 8515413c6b2..7e93070609d 100644
--- a/content/manuals/ai/sandboxes/security/isolation.md
+++ b/content/manuals/ai/sandboxes/security/isolation.md
@@ -31,6 +31,11 @@ processes, files, or resources outside its defined boundaries.
 The agent runs as a non-root user with sudo privileges inside the VM. The
 hypervisor boundary is the isolation control, not in-VM privilege separation.
 
+Processes in a local sandbox can write text to your host clipboard, but can't
+read existing clipboard text. Host clipboard image reads are a separate,
+opt-in feature. After running untrusted code, check clipboard contents before
+pasting them on the host.
+
 ## Network isolation
 
 Each sandbox has its own isolated network. Sandboxes cannot communicate