ClawDefender - OpenClaw Security - Prompt injection, rogue skills etc

**Judgement:** ClawDefender is a strong, practical defensive layer for OpenClaw workspaces, especially valuable for users installing many third‑party skills or consuming lots of untrusted external content. **What it does well** - Audits installed skills and scripts for common malware / abuse patterns (prompt injection, command injection, SSRF, path traversal, credential/config theft). - Provides a universal `sanitize.sh` wrapper to sit in front of any untrusted input stream (emails, APIs, tickets, etc.), with modes for strict blocking, reporting only, or silent filtering. - Validates URLs to catch access to private networks, metadata endpoints, and exfiltration services before requests are made. - Offers clear exit codes and CLI patterns suitable for cron jobs, CI/CD, and HEARTBEAT-style operational checklists. **Risks / limitations** - Detection is pattern/signature-based; sophisticated or novel attacks may evade it (false negatives), so it should be seen as a guardrail, not a complete security solution. - May produce false positives on benign content that includes security-related strings (despite some built-in exclusions), requiring occasional manual review. - Requires a Unix-like environment with bash/grep/sed/jq and basic comfort with command-line pipelines. **Recommended scenarios** - You regularly install or update skills from ClawHub and want an automated security audit step in CI or pre-deploy. - Your agents ingest untrusted text or JSON from email, tickets, GitHub, or third-party APIs and you want to pre-filter for prompt injection. - You expose functionality that fetches arbitrary URLs (web search, webhooks, integrations) and want SSRF/exfiltration checks before making requests. - You need a low-friction, scriptable security layer to standardize "sanitize before process" across your OpenClaw workspace.