Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop

Re:Show HN: Clawk – Give coding agents a disposable Linux VM... by killerstorm on Monday July 13, 2026 @11:07AM (#48893879)

Codex uses bwrap sandbox which is purely cosmetic - out-of-box it sees your ssh keys and can send it to remote server. It prevents agent from deleting outside files by mistake, but does nothing against malicious activity

[ Parent | on HN ]

Re:Show HN: Clawk – Give coding agents a disposable Linux VM... by bpavuk on Monday July 13, 2026 @11:13AM (#48893964)

that Pi extension, by contrast, gives you a popup whenever an agent tries to access something outside the current working directory and send a network request. that depends on configuration. also if agent tries to ssh into something that will also send a request for access, so child processes are covered

[ Parent | on HN ]