1) Hey everyone 👋

I’ve been working on open-source security layer for OpenClaw agents and just made it public.

It focuses on runtime and static protections and validations via plugin and skill against all known attack vectors. 51 check. 12 detection engines. 

It also maps controls to 10 OWASP Agentic AI security categories

Repo:
https://github.com/adversa-ai/secureclaw

Would really appreciate feedback on it from all angles but my honest fear that this security layer may somehow disrupt some functionality in a complex workflow , degrade something or introduce false alerts so I'll be happy to hear about: 

Gaps specific to OpenClaw internals

Performance concerns

Threat model coverage

If anyone is running OpenClaw in production or experimenting with complex tool chains, I’d love to hear a feedback 

Thanks

2) Hey guys, just released a Secure Setup Guide. Let me know what you think about it!
https://safeclaw.io/secure-openclaw-setup


2) We use OpenClaw and built ClawShell on top - process-level isolation for agent secrets using Linux permissions instead of prompt filtering.

Launching next week. Wanted to give you a heads up since we reference OpenClaw in the post.

Post Link: https://x.com/runtainc/status/2022471645206909090
Code: https://github.com/clawshell/clawshell


3) Hey! Been building something some might find useful — essentially a firewall for your ai tool & agents. It's a policy engine that sits between the LLM and the shell. Every command is evaluated against your rules before it executes. Dangerous stuff gets blocked, everything gets logged. No sandbox, your agent keeps full access; just with guardrails. Works with OpenClaw (although forcefully) and most other AI tools. https://github.com/peg/rampart

Also built a sidecar that uses LLMs to semantically verify ambiguous commands that pattern matching alone can't catch


4) Hey everyone! Just released OpenClaw Security Guard -- an open-source CLI tool + live dashboard that audits and hardens your OpenClaw installation.

What it covers:
Secrets scanning (15+ API key formats + entropy analysis),

npm install -g openclaw-security-guard && openclaw-guard audit


GitHub: https://github.com/2pidata/openclaw-security-guard
Discussion: https://github.com/openclaw/openclaw/discussions/15124

5) So I did a thing to help combat prompt injection and wanted to share with you all

Anyone wanting to add a layer of protection to their agents should checkout https://clawgate.ai/ its open source, free to use and adds your phone's biometric passkey auth in between your agent and any sensitive high risk action they might want to carry out. A must have for anyone using openclaw and serious about their security and privacy. The OpenClaw plugin and ios app are now available

Docs and more info: https://clawgate.ai/
iOS App: https://apps.apple.com/us/app/clawgate-ai-agent-security/id6758923726
GitHub: https://github.com/AsteyaTech-com/clawgate-api/

6) Building an interactive security dashboard for Open Claw. Goal is to launch a checklist by this week as well from my learnings. https://x.com/idomyowntricks/status/2021262029382726103?s=46&t=-MF39YpvRtgAS6tJv0iJXw

7) ClawHub Security Update: Contextual Analysis Now Live (Beta),
Following recent incidents where attackers used instruction-only skills to redirect users offsite (bypassing our VirusTotal integration since there were no code files to scan), we've rolled out a new layer of defense.

What's New,
Every skill published to ClawHub now goes through contextual analysis powered by ClawHub Security. This evaluates the actual prose and metadata of a skill, checking for:

Mismatches between what a skill claims to do and what it actually declares,
Suspicious install instructions,
Undisclosed credential requirements,
Social engineering patterns like directing users to download binaries from unverified sources,

Key Features,
Dual Protection Layer
Runs alongside VirusTotal, with the stricter verdict always winning.

Comprehensive Coverage
Instruction-only skills with no code files now receive full security evaluation.

Complete Backfill
Every existing skill on the platform has been evaluated. The backlog is currently running and should complete within the next hour.

Transparent Ratings
Skill detail pages now show the ClawHub Security rating with a breakdown across 5 dimensions:
Purpose alignment,
Instruction scope,
Install mechanism,
Credentials handling,
Persistence behavior,

Defense in Depth
Includes prompt injection detection. The LLM verdict serves as advisory and can flag or block submissions, while VirusTotal malicious findings remain absolute.

Protecting All Users,
We understand that OpenClaw users come from all different levels of proficiency and expertise. ClawHub represents just one area where these protections matter. These same contextual security controls are actively being rolled out to the CLI as well, ensuring that end users receive consistent protection across all surfaces of the platform.

8) Open-sourced a security audit for OpenClaw - checks gateway exposure, secrets on disk, MCP supply chain, container escapes, memory poisoning, and more. OWASP ASI-mapped, CVE-referenced. Just submitted it to the OWASP Agentic AI Security Solutions Landscape. 

https://haveibeenclawned.com/

Your agent can run it itself — ask it to review the site and decide if it's safe to run.

9) Hey all. 

I made a free tool that is to see from a quick glance:

where a skill runs (local/cloud)

what it can access (public/personal/sensitive)

what it can do (read/write/execute)

It's nothing fancy, but hopefully it can help make your research in skill security easier. It isn't always about malware, sometimes it's about what it can touch.

(Let me know if this is allowed mods, since this isn't a SAAS or anything, I figure it should be fine if it helps!)

https://saferclaw.com

10) Pipelock - open source egress firewall for AI agents. Prevents credential exfiltration through capability separation.

https://github.com/luckyPipewrench/pipelock

11) FYI, I improved the docs for https://github.com/dedene/claw-wrap and added Nono as a Firejail alternative for the sandbox. My mind is a lot more at ease now that I know OpenClaw is running fully sandboxed. 🙂
12) We just open-sourced an OpenClaw extension that adds hard, deterministic guardrails using policy as code so you can control OpenClaw better. 

It intercepts tool calls at the execution layer, so it stops the agent from using rm -rf, sudo, or leaking secrets even if prompt injected or misaligned.

Includes 103 rules out of the box to stop dangerous commands, protect OpenClaw system files like SOUL.md, and covers OWASP Top 10 for agentic applications.

Full write-up here with install instructions: https://securetrajectories.substack.com/p/openclaw-rm-rf-policy-as-code

Would love to hear what policies you want to see that aren't already included.

13) 386 Skills Are Affected
https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

14) Hi all 👋 Over the last few days I have been tinkering with my local OpenClaw to reduce the risk of secrets exfiltration.

I ended up building a small wrapper/tools-proxy called claw-wrap (https://github.com/dedene/claw-wrap) that allows OpenClaw to run inside a sandbox where it can do whatever it want, but for all tool calls or cli's where it needs secrets it goes through the wrapper. I wrote up a short article about it: https://x.com/dedene/status/2019139260578693546 

It's far from finished but on my VM at home, it works very nice.
Very curious what this group thinks.

15) we just built a solution for OpenClaw security risks that is like an execution control plane for Openclaw, it intercepts actions and it either approves or blocks them before execution based on your approval rules, we wanna make sure more ppl finally get to know about it and enjoy it, let me know what you think
https://github.com/faramesh/faramesh-guard?tab=readme-ov-file%5C

16)🛡️ Heimdall - Security Scanner for AI Agent Skills

Built a tool to scan OpenClaw/Clawdbot skills for risky patterns BEFORE installing.

Detects 100+ patterns across 13 categories:

• Remote code fetching
• Heartbeat file modifications
• MCP tool misuse
• Hidden unicode characters
• Dangerous shell patterns
• Crypto wallet addresses
• System prompt manipulation
• Data exfiltration attempts
• Credential exposure
• And more...
Context-aware - understands docs vs code to reduce false positives ~85%.

Looking for test cases! If you've seen suspicious skills or know repos with injection examples, share them so I can validate detection.

Sources: Simon Willison, PromptArmor, LLMSecurity, Trail of Bits

https://github.com/henrino3/heimdall

17) Hey peeps! Nick here. Joined the Discord earlier this week and have been using OpenClaw for a couple of weeks. If anyone wants to try securing access to OpenClaw with Pomerium, I have a PR up in the Pomerium docs repo with a guide on how to do it (full disclosure, I work there).

TLDR: It's an identity-aware proxy (IAP) that adds authentication and authorization controls to the gateway dashboard, and you can also use it to secure SSH connections. This is how I currently secure my own OpenClaw  access. Also, feedback welcome on the guide.

https://deploy-preview-2084--pomerium-docs.netlify.app/docs/guides/openclaw-gateway https://github.com/nickytonline/openclaw-pomerium

18) We just open-sourced an OpenClaw extension that adds hard, deterministic guardrails using policy as code so you can control OpenClaw better. 

It intercepts tool calls at the execution layer, so it stops the agent from using rm -rf, sudo, or leaking secrets even if prompt injected or misaligned.

Includes 103 rules out of the box to stop dangerous commands, protect OpenClaw system files like SOUL.md, and covers OWASP Top 10 for agentic applications.

Full write-up here with install instructions: https://securetrajectories.substack.com/p/openclaw-rm-rf-policy-as-code

Would love to hear what policies you want to see that aren't already included.

19) Hi all. I know AI and agent security has been a hot topic here (and out of here 🙂 ) lately, especially around prompt injection, jailbreaks, and secrets leaking during tool or agent execution.
I have experience in cybersecurity and have been experimenting with https://straja.ai, an early-stage, open-source project focused on securing LLM and agent traffic locally.
It’s very much a work in progress, and I’d really value feedback from early adopters if anyone wants to take a look.

20)https://nono.sh 

ok, its up, almost ready to make a first release

I just need to fix homebrew releases and document the setup for openclaw - should be a few hours. Docs DNS is also not prop'ed out yet

21) Been going down a rabbit hole trying to drop as much security on this thing to see if it can be made safe and compliant enough to use in regulated environments.  

https://github.com/rizqcon/equilibrium-guard








