Cleat banner
cleatdev cleatdev

Cleat

DevOps community

Description

Give the agent a cage, not your keys. One-command Docker sandbox for AI coding agents: full autonomous permissions, per-project isolation, your host stays untouched.

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

Cleat

[![Tests](https://github.com/cleatdev/cleat/actions/workflows/test.yml/badge.svg)](https://github.com/cleatdev/cleat/actions/workflows/test.yml) [![Image](https://github.com/cleatdev/cleat/actions/workflows/publish-image.yml/badge.svg)](https://github.com/cleatdev/cleat/actions/workflows/publish-image.yml) [![Release](https://img.shields.io/github/v/release/cleatdev/cleat?label=release)](https://github.com/cleatdev/cleat/releases/latest) [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)

Website Docs Compare Changelog

**Give the agent a cage, not your keys.**

*Unattended, not unguarded.*

Run AI coding agents with full autonomous permissions, safely sandboxed in Docker.

One command. Per-project isolation. Your host stays untouched.

A real Claude Code session inside a Cleat box: credential probes come up empty, the agent deletes the box's own OS on purpose and the host machine (SSH keys, files) is untouched

A real session, not a mockup: Claude Code hunts for keys, finds nothing, then rm -rf's the box's own OS. The host doesn't notice.

curl -fsSL https://cleat.sh/install | bash
cd ~/your-project && cleat

That's it. First run pulls the prebuilt image from GHCR (~30s), starts an isolated container for your proj