clampdown: Run AI coding agents in hardened container sandboxes

by 89luca89 · Agent Tool · ★ 123

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install clampdown

git clone https://github.com/89luca89/clampdown

Taken from the project's README on GitHub.

Security audit verdict: SAFE · quality 66/100

Flagged: privileged Docker. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

agentaiai-agentsclaude-codecontainersdockerlandlockopencodepodmansandbox

Quick Facts

Stars123
Forks11
LanguageGo
CategoryAgent Tool
Quality Score66/100
Open Issues8
Last Updated2026-10-15
Created2026-03-03
Platformsclaude-code, docker, go
Est. Tokens~21k

About clampdown

Clampdown Run AI coding agents in hardened container sandboxes. AI coding agents run arbitrary code on your machine. clampdown confines them to a hardened container sandbox: filesystem access is restricted to your project, network egress is limited to the APIs the agent needs, and every tool container the agent spawns gets the same enforcement. Blue = sidecar. Yellow = agent.

clampdown alternative? Top 6 similar tools

Looking for a clampdown alternative? If you're comparing clampdown with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • vibepod-cli by VibePod · ⭐ 188

    Unified CLI for running AI coding agents in isolated containers. Includes built-in local metrics collection, H

  • kern by getkern · ⭐ 460

    Rootless container runtime with no daemon. Runs agent tool calls and LLM-generated code in kernel-enforced con

  • yoloai by kstenerud · ⭐ 219

    Your agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.

  • greywall by GreyhavenHQ · ⭐ 286

    Container-free, deny-by-default sandbox for AI coding agents. Kernel-enforced filesystem, network, and syscall

  • axocoatl by axocoatl · ⭐ 72

    Run coding agents unattended. Agents write the code. Axocoatl writes the receipt. Claude Code, Codex or a loca

  • agnix by agent-sh · ⭐ 472

    The missing linter and lsp for AI coding assistants. Validate CLAUDE.md, AGENTS.md, SKILL.md, hooks, MCP. Plug

More Agent Tool Tools

Explore other popular agent tool tools:

View all Agent Tool tools →

Popular Go Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse Agent Tool tools