← 返回 Skills 市场
115
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install openclaw-dlp-guard
功能描述
Automatically detects and blocks prompt injection attempts during AI content submission to social media, APIs, web forms, and file outputs.
安全使用建议
This skill is internally consistent with being a pattern-based prompt-injection guard and appears to be instruction-only (no binaries or credentials requested). Before installing or enabling it for automated submissions, verify: (1) how configuration is actually stored/managed (the README mentions ~/.openclaw/... though the package provides no installer), (2) how alerts/notifications are delivered (ensure they don't leak content to an external webhook or third party), and (3) whether the agent runtime will actually enforce these checks (test in a safe environment with harmless injection examples). If you need a guard that runs as code, obtain a real installable implementation (or confirm the platform provides the enforcement hooks) rather than relying only on this instruction-only package.
功能分析
Type: OpenClaw Skill
Name: openclaw-dlp-guard
Version: 2.0.0
The 'openclaw-dlp-guard' skill is a defensive security tool designed to protect the AI agent from prompt injection, data exfiltration, and credential theft during automated tasks. The SKILL.md and openclaw.plugin.json files provide comprehensive regex patterns for detecting malicious intent and sensitive data leaks, implementing a 'safe-by-default' workflow that requires explicit owner approval for high-risk actions. No evidence of malicious intent or exploitable vulnerabilities was found.
能力评估
Purpose & Capability
The skill claims to detect/block prompt injection across social media, APIs, web forms and file writes and its SKILL.md and plugin manifest contain many detection patterns and triggers that match that purpose. Minor inconsistency: README and SKILL.md reference an install command (clawhub install prompt-guard) and a configuration path (~/.openclaw/.../prompt-guard-config.json) even though the package is instruction-only and the registry metadata declares no required config paths or install spec. This is not necessarily malicious but should be clarified (how is configuration persisted and who/what writes that file?).
Instruction Scope
Runtime instructions list concrete triggers (pre_submit, pre_post, pre_send) and pattern-based checks; they do not instruct the agent to read arbitrary unrelated system files, exfiltrate data, call external endpoints, or request secrets. The SKILL.md contains many injection phrases and regex examples — these appear as detection patterns (expected), not as active commands to exfiltrate data.
Install Mechanism
No install spec or code files are provided (instruction-only), which is low-risk. However the README advertises a CLI install command and CLI commands (/guardian ...) even though no binary or install metadata is present in the package. The absence of an actual install artifact means the skill will only be guidance/instructions for the agent rather than executable code installed on disk.
Credentials
The skill requests no environment variables, no credentials, and no config paths in the registry metadata. The included detection lists identify many types of secrets and PII (OpenAI, AWS, SSH keys, SSN etc.) for detection purposes only; there is no unexplained request for access to those secrets.
Persistence & Privilege
The skill is not declared always:true and is user-invocable. It does reference persisting configuration under the user's workspace, which is reasonable for a guard plugin but should be validated at install/runtime. It does not request system-wide privileges or modification of other skills.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install openclaw-dlp-guard - 安装完成后，直接呼叫该 Skill 的名称或使用
/openclaw-dlp-guard触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.0
49+ prompt injection detection patterns, 9 platforms, 16+ API key detection, PII protection
元数据
常见问题
OpenClaw DLP Guard 是什么？
Automatically detects and blocks prompt injection attempts during AI content submission to social media, APIs, web forms, and file outputs. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 115 次。
如何安装 OpenClaw DLP Guard？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install openclaw-dlp-guard」即可一键安装，无需额外配置。
OpenClaw DLP Guard 是免费的吗？
是的，OpenClaw DLP Guard 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
OpenClaw DLP Guard 支持哪些平台？
OpenClaw DLP Guard 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 OpenClaw DLP Guard？
由 danlct27（@danlct27）开发并维护，当前版本 v2.0.0。
推荐 Skills