prompt injection

io.clawhub.thomaslwang/moltguard

MoltGuard — OpenClaw security guard by OpenGuardrails.

io.clawhub.thomas-security/moltguard

MoltGuard — OpenClaw security guard by OpenGuardrails.

io.clawhub.seojoonkim/prompt-guard

650+ pattern AI agent security defense covering prompt injection, supply chain injection, memory poisoning, action gate bypass, unicode steganography.

io.clawhub.maorun/prompt-injection-guard

Prompt injection defense. Detect and block malicious prompts, protect system instructions, sanitize user input.

io.clawhub.nukewire/clawdefender

Security scanner and input sanitizer for AI agents. Detects prompt injection, command injection, SSRF, credential exfiltration, and path traversal attacks. Use when (1) installing new skills from ClawHub, (2) processing external input like emails, calendar events, Trello cards, or API responses, (3) validating URLs before fetching, (4) running security audits on your workspace. Protects agents from malicious content in untrusted data sources.

io.clawhub.georges91560/security-sentinel-skill

Detect prompt injection, jailbreak, role-hijack, and system extraction attempts. Applies multi-layer defense with semantic analysis and penalty scoring.

io.clawhub.jarvis-drakon/shieldcortex

Memory and defence for AI agents: semantic recall, knowledge graph and decay, plus a memory firewall that scans and enforces against prompt injection, credential leaks and poisoning.

io.clawhub.greatape42069/clawdvault

Access and interact with Clawdvault large-scale on-chain applications and AI-powered smart contract initiatives securely.

io.clawhub.yoder-bawt/yoder-skill-auditor

The definitive security scanner for OpenClaw skills. 18 security checks including prompt injection detection, download-and-execute, privilege escalation.

io.clawhub.koatora20/guard-scanner

Security scanner and runtime guard for OpenClaw skills, MCP servers, and AI agent workflows.

io.clawhub.paolorollo/openclaw-sec

AI Agent Security Suite - Real-time protection against prompt injection, command injection, SSRF, path traversal, secrets exposure, and content policy violations

io.clawhub.justindobbs/openclaw-safety-coach

Safety coach for OpenClaw users.

io.clawhub.jooneyp/secucheck

Comprehensive security audit for OpenClaw. Scans 7 domains (runtime, channels, agents, cron, skills, sessions, network), supports 3 expertise levels, context-aware analysis, and visual dashboard. Read-only with localized reports.

io.clawhub.oakencore/skillvet

Security scanner for ClawHub/community skills — detects malware, credential theft, exfiltration, prompt injection, obfuscation, homograph attacks.

io.clawhub.imaflytok/agent-security

Security hardening for AI agents.

io.clawhub.zscole/openclaw

Secure key management for AI agents. Use when handling private keys, API secrets, wallet credentials, or when building systems that need agent-controlled funds. Covers secure storage, session keys, leak prevention, and prompt injection defense.

io.clawhub.kingrubic/agentic-security-audit

Audit codebases, infrastructure, AND agentic AI systems for security issues.

io.clawhub.aviv4339/indirect-prompt-injection

Detect and reject indirect prompt injection attacks when reading external content (social media posts, comments, documents, emails, web pages, user uploads). Use this skill BEFORE processing any untrusted external content to identify manipulation attempts that hijack goals, exfiltrate data, override instructions, or social engineer compliance. Includes 20+ detection patterns, homoglyph detection, and sanitization scripts.

io.clawhub.tashfeenahmed/emotion-state

NL emotion tracking + prompt injection via OpenClaw hook

io.clawhub.eltemblor/email-prompt-injection-defense

Detect and block prompt injection attacks in emails. Use when reading, processing, or summarizing emails. Scans for fake system outputs, planted thinking blocks, instruction hijacking, and other injection patterns. Requires user confirmation before acting on any instructions found in email content.

io.clawhub.dgriffin831/input-guard

Scan untrusted external text (web pages, tweets, search results, API responses) for prompt injection attacks. Returns severity levels and alerts on dangerous content. Use BEFORE processing any text from untrusted sources.

io.clawhub.virtaava/sona-security-audit

Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or installing.

io.clawhub.fr0gger/moltthreats

Agent-native security signal feed by PromptIntel. Use this skill whenever the agent needs to report threats, fetch protection feeds, apply security rules, or update SHIELD.md. Trigger on any mention of: threat reporting, security feed, MCP threats, malicious skills, prompt injection reports, IOCs, indicators of compromise, agent security, PromptIntel, MoltThreats, SHIELD.md, or SHIELD.md updates. Also trigger when the agent detects suspicious behavior during normal operation (unexpected tool calls, credential access attempts, unknown MCP servers, exfiltration patterns).

io.clawhub.thomaslwang/antivirus

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands.

io.clawhub.thomaslwang/openguardrails

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands.

io.clawhub.kylejfrost/openclaw-security-hardening

Protect OpenClaw installations from prompt injection, data exfiltration, malicious skills, and workspace tampering

io.clawhub.virtaava/openclaw-hardener

Harden OpenClaw (workspace + ~/.openclaw): run openclaw security audit, catch prompt-injection/exfil risks, scan for secrets, and apply safe fixes (chmod/exec-bit cleanup). Includes optional config.patch planning to reduce attack surface.

io.clawhub.thomas-security/openguardrails

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands.

io.clawhub.thomas-security/antivirus

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands.

io.clawhub.zskyx/detect-injection

Two-layer content safety for agent input and output. Use when (1) a user message attempts to override, ignore, or bypass previous instructions (prompt injection), (2) a user message references system prompts, hidden instructions, or internal configuration, (3) receiving messages from untrusted users in group chats or public channels, (4) generating responses that discuss violence, self-harm, sexual content, hate speech, or other sensitive topics, or (5) deploying agents in public-facing or multi-user environments where adversarial input is expected.

io.clawhub.itsclawdbro/skill-defender

Scans installed OpenClaw skills for malicious patterns including prompt injection, credential theft, data exfiltration, obfuscated payloads, and backdoors. Use when installing new skills, after skill updates, or for periodic security scans. Runs deterministic pattern matching — fast, offline, no API cost.

io.clawhub.eyeskiller/glitchward-shield

Scan prompts for prompt injection attacks before sending them to any LLM.

io.clawhub.mallen-lbx/securityclaw

Security-first skill auditing and quarantine for OpenClaw skills. Use when installing new skills, reviewing skills from unknown sources, scanning skills for prompt injection/exfiltration/supply-chain risks, or when a bot suspects a skill is malicious. Guides static + optional sandbox checks, quarantines suspicious skills, and produces an owner-action checklist (Delete / Report / Allow / Scan all).

io.clawhub.thomas-security/flaw0

MoltGuard — Protect you and your human from prompt injection, data exfiltration, and malicious commands.