diff --git a/docs/code-execution-security-guide.md b/docs/code-execution-security-guide.md
index 8c4f831..f40ff53 100644
--- a/docs/code-execution-security-guide.md
+++ b/docs/code-execution-security-guide.md
@@ -178,6 +178,8 @@ Validation is basic pattern matching. Not comprehensive - relies on sandbox for
 
 By default (when the `sandbox` argument is not specified), `execute_code` uses the restricted `anvilmcp` sandbox configuration. If this fails (e.g., due to kernel or permission constraints), it falls back to the `default` sandbox — the same configuration used by the outer landrun invocation. This compromise provides "just works" behavior and avoids surprises, while still applying the tighter sandbox when possible.
 
+For higher-risk scenarios (e.g., running untrusted scripts, processing sensitive data), the `anvilmcp` sandbox should be explicitly specified to ensure the tighter restrictions are enforced — it uses a temporary workspace, minimal filesystem access, and a restricted set of environment variables.
+
 ### Adjusting Timeout
 
 Default: 30 seconds
diff --git a/docs/code-execution-security.md b/docs/code-execution-security.md
index b4edf00..733a32b 100644
--- a/docs/code-execution-security.md
+++ b/docs/code-execution-security.md
@@ -318,6 +318,8 @@ import { evil } from "/etc/passwd";
 
 By default (when the `sandbox` argument is not specified), `execute_code` uses the restricted `anvilmcp` sandbox configuration. If this fails (e.g., due to kernel or permission constraints), it falls back to the `default` sandbox — the same configuration used by the outer landrun invocation. This compromise provides "just works" behavior and avoids surprises, while still applying the tighter sandbox when possible.
 
+For higher-risk scenarios (e.g., running untrusted scripts, processing sensitive data), the `anvilmcp` sandbox should be explicitly specified to ensure the tighter restrictions are enforced — it uses a temporary workspace, minimal filesystem access, and a restricted set of environment variables.
+
 ### bash Permissions
 
 ```bash