Show HN: Clawk – Give coding agents a disposable Linux VM, not your laptop

Re:Show HN: Clawk – Give coding agents a disposable Linux VM... by zzril on Monday July 13, 2026 @11:11AM (#48893943)

If your threat model is that of a malicious agent that will use a 0-day LPE to get root and exfiltrate all of your SSH keys, virtualization makes sense. But then, I wouldn't run such an agent at all, if not specifically in the context of malware analysis.

If you're just concerned about "agent messing up and taking the rules in some markdown files more laxly than I would have", then running it as a seperate user is totally enough...

[ Parent | on HN ]

Re:Show HN: Clawk – Give coding agents a disposable Linux VM... by matheusmoreira on Monday July 13, 2026 @11:14AM (#48893977)

Threat model is supply chain attacks on unmaintained package repositories like npm, pip and cargo. Everything on my host comes from my Linux distribution's repositories. Everything else gets virtualized with extreme prejudice. I'll even virtualize my Steam games one of these days.

[ Parent | on HN ]

Re:Show HN: Clawk – Give coding agents a disposable Linux VM... by khuey on Monday July 13, 2026 @11:15AM (#48894002)

IMO the threat model is more letting the agent loose on issues/PRs in a public Github repo and it getting tricked into running a malicious payload.

[ Parent | on HN ]