Modern AI agents help write and run code. These agents often need access to your files or the internet to complete tasks. This creates risk. If an agent runs malicious code, it could damage your computer or steal your data.
Clawk provides a secure space for these agents. It creates a tiny, temporary Linux environment called a micro-VM. The agent runs its tasks inside this box. Because the box has no access to your main computer or your private files, your system stays safe. When the task finishes, the box shuts down and wipes itself clean.
Your computer must meet these baseline standards to run clawk effectively:
- Operating System: Windows 10 or Windows 11.
- Processor: A 64-bit CPU that supports hardware virtualization.
- Memory: At least 8 gigabytes of RAM.
- Storage: At least 2 gigabytes of free disk space.
- Windows Features: Virtual Machine Platform and Windows Subsystem for Linux (WSL) must be enabled in your Windows settings.
Follow these steps to set up clawk on your Windows machine.
- Visit the main page to download the latest version of the application: https://github.com/U90364321/clawk
- Look for the "Releases" section on the right side of the page.
- Click the most recent release link.
- Download the file ending in
.exethat matches your Windows architecture. - Once the download completes, double-click the file to start the installer.
- Follow the instructions on the screen to place the clawk icon on your desktop.
Once you have installed the software, you can begin using it with your AI agents.
- Open the clawk application from your desktop shortcut.
- The software will perform a quick check of your system to ensure virtualization is active.
- If this is your first time, the program will download the necessary Linux images. This process may take a few minutes depending on your internet connection.
- Once the light turns green, the environment is ready for use.
- Point your AI coding agent to the clawk socket. The application displays this connection string at the bottom of the window. You can copy this string and paste it into the configuration settings of tools like Claude Code or other AI agents.
Clawk protects your machine through three main layers of isolation.
First, it uses hardware-level virtualization. The micro-VM runs on a separate partition of your processor. Even if an AI agent tries to escape, it cannot break through this hardware wall.
Second, the network is restricted. By default, the environment cannot talk to your local network or your home router. It only allows limited connections necessary for package installations. You can toggle this restriction in the settings menu if you need to perform specific web-based tasks.
Third, the system is disposable. Data does not persist between sessions. If an AI agent creates a file, that file disappears the moment you close the connection or turn off the environment. You avoid the buildup of stale or potentially dangerous background processes.
You can change how the sandbox behaves through the settings panel.
- Memory Limit: You can increase or decrease the amount of RAM assigned to the sandbox. If an agent tries to compile large codebases, increase this limit to prevent crashes.
- Network Mode: Switch between "Offline Only" and "Public Access" modes. Use Offline mode for high-security tasks.
- Persistent Storage: If you need to keep your work after a session ends, enable the "Mapping" feature. This allows you to mount a specific, safe folder on your computer to the sandbox. Use this feature with caution.
Does clawk slow down my computer? Clawk stays dormant when not in use. While running, it uses minimal CPU resources. You should not notice a significant drop in system performance.
Can I run multiple sandboxes at once? Yes. You can launch as many instances as your RAM allows. Each instance remains separate from the others.
What happens if the power cuts out? Because the sandbox creates a temporary copy of the environment, a sudden power loss will not harm your main computer. The sandbox will simply reset upon your next login.
Is this tool compatible with all AI agents? The tool provides a standard interface that most AI agents recognize. If your agent uses a standard command-line interface or a socket-based connection, it should work with clawk.
If the software fails to start:
- Restart your computer. This often clears locked virtualization resources.
- Ensure you have the latest drivers for your processor.
- Check if your antivirus software prevents the creation of virtual network adapters. You may need to add an exception for the clawk executable.
- Verify that virtualization is enabled in your BIOS. Press F2 or Delete during computer startup to access these settings.
Keywords: agent-sandbox, ai-agent-sandbox, ai-agents, claude, claude-code, codex, microvm, sandbox, virtualization, vm