Setup & Installation
openclaw skills install @andrewandrewsen/messageguard
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
npx clawhub install messageguard
What This Skill Does
MessageGuard scans outgoing messages for sensitive data patterns before they are sent. It supports three response modes: masking matched content, blocking the message entirely, or generating a warning. Built-in patterns cover common secrets like API keys, AWS credentials, and JWTs, with support for custom regex patterns.
Catches secret leaks at the point of sending rather than after the fact, with no third-party dependencies required.
When to use it
- Blocking API keys from being pasted into shared chat logs
- Masking JWT tokens before sending debug output to teammates
- Warning when AWS credentials appear in outgoing messages
- Logging credential detections for compliance audits
- Enforcing secret hygiene in automated messaging pipelines
Example Workflow
Here's how your AI assistant might use this skill in practice.
INPUT
User asks: send this debug log to the team channel
AGENT
- 1Intercepts the outgoing message before delivery
- 2Runs the content against configured regex patterns
- 3Detects an AWS access key pattern match
- 4Applies the configured mode action (mask, block, or warn)
- 5Writes a structured JSON detection entry to the configured log path
OUTPUT
Message is blocked or masked and the detection is recorded in the log file