← Back to Skills Marketplace
115
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install openclaw-dlp-guard
Description
Automatically detects and blocks prompt injection attempts during AI content submission to social media, APIs, web forms, and file outputs.
Usage Guidance
This skill is internally consistent with being a pattern-based prompt-injection guard and appears to be instruction-only (no binaries or credentials requested). Before installing or enabling it for automated submissions, verify: (1) how configuration is actually stored/managed (the README mentions ~/.openclaw/... though the package provides no installer), (2) how alerts/notifications are delivered (ensure they don't leak content to an external webhook or third party), and (3) whether the agent runtime will actually enforce these checks (test in a safe environment with harmless injection examples). If you need a guard that runs as code, obtain a real installable implementation (or confirm the platform provides the enforcement hooks) rather than relying only on this instruction-only package.
Capability Analysis
Type: OpenClaw Skill
Name: openclaw-dlp-guard
Version: 2.0.0
The 'openclaw-dlp-guard' skill is a defensive security tool designed to protect the AI agent from prompt injection, data exfiltration, and credential theft during automated tasks. The SKILL.md and openclaw.plugin.json files provide comprehensive regex patterns for detecting malicious intent and sensitive data leaks, implementing a 'safe-by-default' workflow that requires explicit owner approval for high-risk actions. No evidence of malicious intent or exploitable vulnerabilities was found.
Capability Assessment
Purpose & Capability
The skill claims to detect/block prompt injection across social media, APIs, web forms and file writes and its SKILL.md and plugin manifest contain many detection patterns and triggers that match that purpose. Minor inconsistency: README and SKILL.md reference an install command (clawhub install prompt-guard) and a configuration path (~/.openclaw/.../prompt-guard-config.json) even though the package is instruction-only and the registry metadata declares no required config paths or install spec. This is not necessarily malicious but should be clarified (how is configuration persisted and who/what writes that file?).
Instruction Scope
Runtime instructions list concrete triggers (pre_submit, pre_post, pre_send) and pattern-based checks; they do not instruct the agent to read arbitrary unrelated system files, exfiltrate data, call external endpoints, or request secrets. The SKILL.md contains many injection phrases and regex examples — these appear as detection patterns (expected), not as active commands to exfiltrate data.
Install Mechanism
No install spec or code files are provided (instruction-only), which is low-risk. However the README advertises a CLI install command and CLI commands (/guardian ...) even though no binary or install metadata is present in the package. The absence of an actual install artifact means the skill will only be guidance/instructions for the agent rather than executable code installed on disk.
Credentials
The skill requests no environment variables, no credentials, and no config paths in the registry metadata. The included detection lists identify many types of secrets and PII (OpenAI, AWS, SSH keys, SSN etc.) for detection purposes only; there is no unexplained request for access to those secrets.
Persistence & Privilege
The skill is not declared always:true and is user-invocable. It does reference persisting configuration under the user's workspace, which is reasonable for a guard plugin but should be validated at install/runtime. It does not request system-wide privileges or modification of other skills.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install openclaw-dlp-guard - After installation, invoke the skill by name or use
/openclaw-dlp-guard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
49+ prompt injection detection patterns, 9 platforms, 16+ API key detection, PII protection
Metadata
Frequently Asked Questions
What is OpenClaw DLP Guard?
Automatically detects and blocks prompt injection attempts during AI content submission to social media, APIs, web forms, and file outputs. It is an AI Agent Skill for Claude Code / OpenClaw, with 115 downloads so far.
How do I install OpenClaw DLP Guard?
Run "/install openclaw-dlp-guard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is OpenClaw DLP Guard free?
Yes, OpenClaw DLP Guard is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does OpenClaw DLP Guard support?
OpenClaw DLP Guard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created OpenClaw DLP Guard?
It is built and maintained by danlct27 (@danlct27); the current version is v2.0.0.
More Skills