ClawDefender - OpenClaw Security - Prompt injection, rogue skills etc

Security scanner and input sanitizer for AI agents. Detects prompt injection, command injection, SSRF, credential exfiltration, and path traversal attacks. Use when (1) installing new skills from ClawHub, (2) processing external input like emails, calendar events, Trello cards, or API responses, (3) validating URLs before fetching, (4) running security audits on your workspace. Protects agents from malicious content in untrusted data sources.

Install only if you treat this as a lightweight regex helper, not a security boundary. Avoid using its --install mode for untrusted skills, use strict blocking for agent-facing input pipelines, and do not rely on its URL validator as the only SSRF protection before fetching external URLs.

Type: OpenClaw Skill Name: clawdefender Version: 1.0.1 The skill bundle 'clawdefender' is a security tool designed to protect AI agents from various attacks, including prompt injection, command injection, SSRF, credential exfiltration, and path traversal. The `SKILL.md` clearly outlines its defensive purpose and instructs the agent to be cautious of flagged content. The `clawdefender.sh` script implements extensive detection patterns for malicious activities and performs audits, input validation, and safe skill installation. The `sanitize.sh` script acts as a wrapper for prompt injection detection. All observed behaviors are consistent with a legitimate security scanner and lack any evidence of intentional harmful actions by the skill itself.