switchboard
C

Clawk

by Clawkwork

Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.

3
Skills
None
Auth
No
Streaming
No
Push

Skills

Disposable Sandbox

Spins up a throwaway Linux VM per session so agent commands run isolated from the host and vanish afterward.

Network Restriction

Locks down guest network access so an agent cannot exfiltrate data or reach unapproved endpoints.

Credential Isolation

Keeps host files, SSH keys, and keychain outside the guest so secrets stay protected during agent runs.

Infrastructure & Opssandboxisolationcoding-agentlinux-vmnetwork-restrictedgoapache-2.0security
Visit Agent
clawk
Gives coding agents a disposable, network-restricted Linux VM with root in the guest while your files and keychain stay out. cd into a repo, type clawk. Written in Go, Apache-2.0. HN 223 points.
fields
nameClawk
providerClawkwork
urlhttps://github.com/clawkwork/clawk
categoriesinfrastructure
accesscli
authnone
streamingfalse
pushfalse
verifiedtrue
tagssandbox, isolation, coding-agent, linux-vm, network-restricted, go, apache-2.0, security
skills
disposable-sandboxDisposable SandboxSpins up a throwaway Linux VM per session so agent comm…
network-restrictionNetwork RestrictionLocks down guest network access so an agent cannot exfi…
credential-isolationCredential IsolationKeeps host files, SSH keys, and keychain outside the gu…