← Back to Skills Marketplace
12193
Downloads
4
Stars
39
Active Installs
1
Versions
Install in OpenClaw
/install prompt-injection-guard
Description
Prompt injection defense. Detect and block malicious prompts, protect system instructions, sanitize user input.
Usage Guidance
Install this if you want an automatic prompt-injection guard, but expect occasional interruptions or false positives because the trigger keywords are broad. If you use its logging guidance, decide where logs are stored, how long they are kept, and how sensitive prompt fragments are redacted. Confirm the publisher/version metadata if provenance matters for your environment.
Capability Analysis
Type: OpenClaw Skill
Name: prompt-injection-guard
Version: 1.0.0
The OpenClaw AgentSkills skill bundle 'prompt-injection-guard' is designed to protect the AI agent from prompt injection attacks. The `SKILL.md` file contains instructions for the agent to detect and block malicious prompts, sanitize user input, filter sensitive output, and prevent unauthorized actions like credential leakage or unapproved financial transactions. All instructions are defensive in nature, aiming to enhance the agent's security posture. There is no evidence of malicious intent, data exfiltration, unauthorized execution, or any vulnerabilities that could be exploited by this skill itself; rather, it aims to prevent such attacks.
Capability Assessment
Purpose & Capability
The stated purpose matches the artifact content: it defines prompt-injection patterns, context separation, output filtering, and blocking of unsafe requests such as credential leakage or unapproved transfers.
Instruction Scope
The skill auto-triggers on broad words such as prompt, injection, and attack, so it may interrupt ordinary security or AI discussions; this is disclosed and aligned with a guard skill, but could create false positives.
Install Mechanism
The package contains only SKILL.md and _meta.json with no executable scripts or install commands. Metadata shows a publisher/owner ID mismatch between registry context and _meta.json, which is a provenance note rather than malicious behavior.
Credentials
The artifacts request no OS access, credentials, network endpoints, binaries, or environment variables. The only notable data flow is recommended logging of detected patterns and partial inputs.
Persistence & Privilege
The skill suggests logs and alerts for detections but does not define storage location, retention, or access controls. It does not create background workers, privileged persistence, or automatic system changes.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install prompt-injection-guard - After installation, invoke the skill by name or use
/prompt-injection-guard - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial version of prompt-injection-guard skill.
- Provides prompt injection detection and defense for AI assistants.
- Detects and blocks malicious prompts and known attack patterns.
- Enforces clear input boundaries and context separation.
- Filters outputs to prevent leakage of passwords, secret keys, and system prompts.
- Includes specialized protections for cryptocurrency and SNS operations.
- Supports multi-level detection logic: warning, confirmation, and blocking.
- Designed for seamless integration and continuous monitoring of threats.
Metadata
Frequently Asked Questions
What is Prompt Injection Guard?
Prompt injection defense. Detect and block malicious prompts, protect system instructions, sanitize user input. It is an AI Agent Skill for Claude Code / OpenClaw, with 12193 downloads so far.
How do I install Prompt Injection Guard?
Run "/install prompt-injection-guard" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Prompt Injection Guard free?
Yes, Prompt Injection Guard is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Prompt Injection Guard support?
Prompt Injection Guard is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Prompt Injection Guard?
It is built and maintained by maorun (@maorun); the current version is v1.0.0.
More Skills