Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop
Category: security
Tags: vm-sandbox, coding-agent, security
Score: 7.3/10 (Innovation: 7, Technical: 8, Documentation: 7, Utility: 7)
Clawk provides a disposable Linux VM for coding agents like Claude Code, letting them operate autonomously without risking the host machine. It combines Apple's Virtualization.framework with OCI images and network allow-listing to create a secure sandbox that feels like a real machine, solving a critical safety gap in AI-assisted development. The project is innovative in treating the VM boundary as the security mechanism rather than fragile per-command permissions.
Target audience: backend devs, devops, data engineers
Repository: https://github.com/clawkwork/clawk · Go · Apache-2.0 · 4 stars
View on Hacker News