Claude Sandboxed on macOS

Run Claude Code in a secure sandbox with AWS credentials, Kubernetes access, and restricted file scope.

Quick Setup

1. Install dependencies

brew install claude-code agent-safehouse aws-vault git

2. Add to ~/.zshrc

# csb — Claude Sandboxed
csb() { 
  AWS_VAULT=default safehouse --enable=cloud-credentials,kubectl,shell-init \
    --workdir=~/git/work/il -- claude --dangerously-skip-permissions "$@"
}

Note: Replace ~/git/work/il with your project directory.

3. Reload and test

source ~/.zshrc
csb

How It Works

csb() sets up a sandboxed Claude session with:

• AWS_VAULT=default - Access to AWS credentials from Keychain via aws-vault
• safehouse --enable=... - Enables specific features:
  • cloud-credentials - AWS access
  • kubectl - Kubernetes CLI access
  • shell-init - Shell startup files (git, tools, etc.)
• --workdir=~/git/work/il - Restricts file access to this directory only
• --dangerously-skip-permissions - Skips permission prompts for smooth operation

Usage

# Start interactive session
csb