| name | clawguardian |
| description | Local-first security scanner for OpenClaw agents. Detects prompt injection, exfiltration patterns, tool abuse, and social engineering using bundled signatures. |
| version | 2.0.16 |
| metadata | {"openclaw":{"requires":{"bins":["python3"],"env":["GUARDIAN_WORKSPACE","GUARDIAN_CONFIG","OPENCLAW_WORKSPACE","OPENCLAW_CONFIG_PATH"]},"permissions":["read_workspace","write_workspace","shell_optional","network_optional"]}} |
Guardian
Security scanner for OpenClaw agents. Detects prompt injection, credential
exfiltration attempts, tool abuse patterns, and social engineering attacks using
regex-based signature matching.
Guardian provides two scanning modes:
- Real-time pre-scan — checks each incoming message before it reaches the model
- Batch scan — periodic sweep of workspace files and conversation logs
All data stays local. This release removes optional webhook/API networking paths to reduce moderation risk.
Cron setup remains optional via scripts/onboard.py --setup-crons.
Scan results are stored in a SQLite database (guardian.db).
Installation
cd ~/.openclaw/skills/guardian
./install.sh
Install mechanism and review
This package includes executable scripts (including install.sh) and Python modules.
Review before running in production.
performs local setup/validation; optional helper is opt-in for cron setup.
