Should I put roboform outside sandbox?

Right now I'm running browser with roboform (password manager) inside sandboxie.

If there is a security hole in roboform, can my passwords in roboform be stolen while browsing a rogue site?

Would it be safer then, to not use roboform browser adapter, but run roboform outside the sandboxed browser and copy/paste passwords as needed? This way there is no way for rogue site to pass through sandboxie to access roboform.

 

Either way is safe as long as you use Sandboxie for browsing. Add Internet Access Restrictions, and no malware can upload your info from within the sandbox.