Clawk
by Clawkwork
Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.
Skills
Disposable Sandbox
Spins up a throwaway Linux VM per session so agent commands run isolated from the host and vanish afterward.
Network Restriction
Locks down guest network access so an agent cannot exfiltrate data or reach unapproved endpoints.
Credential Isolation
Keeps host files, SSH keys, and keychain outside the guest so secrets stay protected during agent runs.
Related Agents
OpenSandbox
Runs AI-agent workloads in isolated Docker or Kubernetes sandboxes, exposing sandbox lifecycle, command, filesystem, an…
Docker Sandboxes
Disposable, isolated container sandboxes for running untrusted agent-generated code, with filesystem and network isolat…
AgentMail
Email inbox API built for AI agents. Create, send, receive, search, and manage email programmatically with SDKs for Pyt…
Airbyte Agents
Context layer for AI agents: MCP server and Python SDK giving agents unified access to 50+ business data connectors wit…