Ross ROSS = Recommend OSS · open-source software intelligence for agents

clawkwork/clawk

Give coding agents a disposable Linux VM, not your laptop observed · 2026-10-10

github.com/clawkwork/clawk · Go · Apache-2.0 (permissive) observed · 2026-10-10

Health v2 · maintenance only

73/100

  • Activity 89
  • Release rhythm 90
  • Longevity 7

Flags: young

How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-22. Adoption (stars, forks) is never an input.

  • gap_med: 6.5
  • age_days: 107
  • days_rel: 69
  • days_push: 69
  • n_releases_24m: 5

Full methodology

Adoption not part of the score

1028 stars · 41 forks observed · 2026-10-10

What it is AI-extracted, prompt v1, taxonomy v1, 2026-09-07, confidence 0.93

clawk is a Go CLI tool that runs coding agents like Claude Code or Codex inside a disposable Linux microVM instead of directly on your machine. It mounts your repo into the VM, forwards ssh-agent so workflows like git push keep working, and enforces a network allow-list to block unknown servers.

Use cases

  • run a coding agent with root access without risking my own files and keys
  • sandbox claude code or codex in a disposable VM
  • block an AI agent from sending data to unknown servers
  • let an agent install packages and run code without permission prompts
  • destroy and recreate a wrecked agent sandbox with one command
  • isolate AI agent execution from my laptop keychain and ssh keys

When to choose

  • You use autonomous coding agents (Claude Code, Codex) and want OS-level isolation rather than permission prompts
  • You want the agent to have root and network access inside a sandbox while your host machine stays untouched
  • You need git push and ssh-agent workflows to keep working inside the sandbox

When to avoid

  • You are on Windows (only macOS and experimental Linux are supported)
  • You need to allow the agent access to hosts beyond the allow-list or your host filesystem
  • You need a fully airtight guarantee against data exfiltration via pre-allowed hosts like github.com

Facets

cli-tool · maturity active

security developer-tools agent-framework developer-tools security cli go sandbox microvm claude-code codex disposable-vm agent-isolation virtualization ai-agents command-line macos linux

1 source

Member repositories

RepositoryRoleHealth v2
clawkwork/clawkmain73

For agents

markdown · JSON · MCP: product_card(name="clawkwork/clawk")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem