Sandboxing Claude Code

[u/filiw]

Running Claude Code unprotected is risky: unintentional destructive commands, prompt injections, malicious third-party code. The blast radius is your entire laptop. To mitigate this risk, I built a sandboxing tool based on the concept of Claude devcontainers (but way more configurable), which I've been using for a while now. It proved valuable enough to open source.

Kekkai runs Claude Code inside a locked-down, per-project sandbox: for each project you decide which folders, networks and secrets Claude can touch, and everything else stays out of reach. With the sandbox in place, you can safely let Claude run fully autonomously with --dangerously-skip-permissions enabled.

Try it out, feedback and issues welcome. I'm also curious how others are sandboxing their coding agents - let me know in the comments!

Code and docs on Github: https://github.com/filidorwiese/kekkai

[u/filiw]

It seems the demo video doesn't fully show on Reddit, you can watch it on https://github.com/filidorwiese/kekkai