Duru Prompt Shield

Minimal anti-prompt-injection guardrail for OpenClaw agents. Use when handling untrusted external content (web pages, emails, tool output, documents), before...

This skill appears to do what it claims and has no secret-env requirements or remote installers. Before installing or running it: (1) Inspect and, if needed, customize the rules/regex files under rules/ to fit your environment (to avoid false positives/negatives). (2) Keep PSL_LOG_PATH and PSL_RL_STATE_PATH at their defaults (skill-local memory/) unless you explicitly want logs/state elsewhere — avoid pointing them at sensitive system files. (3) Review .env if present and any environment variables you supply; runtime env overrides are supported and can change which files are read/written. (4) Treat the tool as an advisory guardrail — pair it with human confirmation for irreversible actions. If you need higher assurance, run the included tests (scripts/test-v2.sh) in a safe sandbox first.

Type: OpenClaw Skill Name: prompt-shield-lite Version: 0.1.3 The prompt-shield-lite skill is a defensive security tool designed to protect OpenClaw agents from prompt injection and accidental data leakage. It features robust text normalization, multi-format decoding (Base64, URL, HTML), and regex-based scanning for both incoming untrusted content and outgoing sensitive data, including automated redaction of API keys and tokens. The implementation in scripts/psl-core.py and scripts/psl-core.sh is transparent, follows security best practices for guardrails, and contains no evidence of malicious intent or high-risk vulnerabilities.