AI BriefingShow HN: Clawk – Give your coding agent a disposable Linux VM instead of your laptop
Key point
It provides a disposable Linux VM environment that safely isolates a coding agent's code execution and package installation.
Details
This is an open-source tool that addresses the security risks that can arise when a coding agent (Claude Code, Codex, etc.) runs commands directly on a user's device.
Clawk assigns the agent an isolated, disposable Linux VM instead of the user's host machine. This allows the agent to perform tasks such as installing packages, running code, and using the network, while preventing access to the user's personal files, SSH keys, and critical assets.
Key features include:
- Security isolation: The environment where the agent runs is a separate VM, and it can only access host files through explicitly allowed paths (mounts).
- Network control: Whitelist-based network control blocks the agent from sending data to unapproved servers.
- Session recovery: The
clawk attachcommand lets you reload an agent session you were working on at a later time. - Easy reset: Even if the VM environment becomes corrupted, running
clawk destroy && clawkimmediately rebuilds a clean environment.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Foremerge v0.5.0 Released: Rust-Based Open-Source Tool Detects Intent Conflicts Between Parallel AI Coding Agents
Whiteboard Launches Open-Source VS Code Fork for Human-AI Collaborative Software DesignOpenComputer Hosts 'Ship Video' Agent Using Claude Opus 5.5 to Generate Explainer Videos from Code