Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
ClawDefender v1.0.1 - Tuned pattern detection to reduce false positives.
What This Skill Does
Security scanner and input sanitizer for AI agents. Detects prompt injection, command injection, SSRF, credential exfiltration, and path traversal across 90+ patterns. Runs as shell scripts that pipe into any agent workflow.
It runs as a standard shell pipe with no external dependencies, so it integrates into any existing agent workflow without additional configuration.
When to use it
- Auditing all installed skills for malware before running them
- Sanitizing API responses before an agent acts on them
- Validating a URL before fetching to prevent SSRF
- Filtering GitHub issue content to block embedded injection attempts
- Blocking credential theft attempts in untrusted email content
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: sanitize this API response before the agent processes it
- 1Pipe the API response through sanitize.sh with the --json flag
- 2Scanner checks content against prompt injection, command injection, and exfiltration patterns
- 3Flagged sections are wrapped with warning markers and withheld from processing
- 4Clean content passes through for normal agent use
Sanitized JSON ready for the agent, with suspicious sections marked and flagged to the user