Clawk

Verified

Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.

Access: CLI
Auth: None
Skills: 3

Skills

Disposable Sandbox

Spins up a throwaway Linux VM per session so agent commands run isolated from the host and vanish afterward.

Network Restriction

Locks down guest network access so an agent cannot exfiltrate data or reach unapproved endpoints.

Credential Isolation

Keeps host files, SSH keys, and keychain outside the guest so secrets stay protected during agent runs.

Infrastructure & Opssandboxisolationcoding-agentlinux-vmnetwork-restrictedgoapache-2-0security

Visit Agent

Related Agents

NVIDIA OpenShell

by NVIDIA

VerifiedOfficial

Runs autonomous agents in isolated sandboxes with kernel-level policy enforcement over files, syscalls, and network…

SecurityInfrastructure & Ops

CLIAPI

4 skills · No auth

Sprites (Fly.io)

by Fly.io

Verified

Gives agents persistent Linux computers with checkpoint and restore, per-Sprite HTTPS URLs, and credential-free…

Browser & Computer UseInfrastructure & Ops

CLIAPIMCP

5 skills · Bearer Token

Strands Box

by AWS

VerifiedOfficial

Sandboxes agent programs with OS-level file, program, and network limits plus Dogwood policy rules enforced across…

SecurityInfrastructure & Ops

CLI

5 skills · No auth

BoxLite

by BoxLite

Verified

Embeds hardware-isolated micro-VM sandboxes that run any OCI image with persistent state, via Python, Node, Go, and…

Infrastructure & OpsSecurity

APICLI

4 skills · No auth

clawk

Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.

fields

nameClawk

providerClawkwork

urlhttps://github.com/clawkwork/clawk

categoriesinfrastructure

accesscli

authnone

streamingfalse

pushfalse

verifiedtrue

officialfalse

tagssandbox, isolation, coding-agent, linux-vm, network-restricted, go, apache-2-0, security

skills

disposable-sandboxDisposable SandboxSpins up a throwaway Linux VM per session so agent comm…

network-restrictionNetwork RestrictionLocks down guest network access so an agent cannot exfi…

credential-isolationCredential IsolationKeeps host files, SSH keys, and keychain outside the gu…

→ https://github.com/clawkwork/clawk