Show HN: Nilbox – Run OpenClaw without exposing your API tokens

Category: devtools

Tags: security, virtualization, ai-agents, sandbox, api-security

Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 8, Utility: 6)

Nilbox is a desktop sandbox that runs untrusted AI agents in full VM isolation with a zero-token security architecture. It's interesting because it transparently proxies API calls to swap dummy environment variables for real tokens only on trusted domains, preventing credential theft without modifying the agent code.

Target audience: backend devs, devops, ai developers

Repository: https://nilbox.run/ · Rust · GPL-3.0 · 2 stars

View on Hacker News