AI · alternatives · 2026
24 alternatives to BrokenClaw Part 5: GPT-5.4 Edition (Prompt Injection)
Another BrokenClaw! Today, from web fetch to remote code execution. A human user asks "Please fetch a webpage". After many tool calls, the lobster is confused and eventually...
BrokenClaw Part 5 is a collection of prompt injection experiments using OpenClaw and GPT-5.4. It represents the final installment in the BrokenClaw series, focusing on testing vulnerabilities and behaviors in large… Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Prices are shown for the 1 we have checked on their own sites, 1 of them free or with a free tier.
- 1
I’ve been running Clawdbot for the last couple weeks and have genuinely found it useful but running it scares the crap out of me. OpenClaw has 52+ modules and runs agents with near-unlimited permissions in a single Node process. NanoClaw is ~500 lines of core code, agents run in actual Apple containers with filesystem isolation. Each chat gets its own sandboxed context. This is not a swiss army knife. It’s built to match my exact needs. Fork it and make it yours.
Feb 2026 · github.com · its alternatives →
- 2
- 3
Hey HN, Henry here from Cactus. We open-sourced Needle, a 26M parameter function-calling (tool use) model. It runs at 6000 tok/s prefill and 1200 tok/s decode on consumer devices. We were always frustrated by the little effort made towards building agentic models that run on budget phones, so we conducted investigations that led to an observation: agentic experiences are built upon tool calling, and massive models are overkill for it. Tool calling is fundamentally retrieval-and-assembly (match query to tool name, extract argument values, emit JSON), not reasoning. Cross-attention…
May 2026 · github.com · its alternatives →
- 4
ZooClaw▲290Your proactive team of AI specialists in one place
Apr 2026 · zoowork.ai · its alternatives →
- 5
Redteaming LLMs using other LLMs. Contribute to traghav/auto-redteam development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 6
I built LocalGPT over 4 nights as a Rust reimagining of the OpenClaw assistant pattern (markdown-based persistent memory, autonomous heartbeat tasks, skills system). It compiles to a single ~27MB binary — no Node.js, Docker, or Python required. Key features: - Persistent memory via markdown files (MEMORY, HEARTBEAT, SOUL markdown files) — compatible with OpenClaw's format - Full-text search (SQLite FTS5) + semantic search (local embeddings, no API key needed) - Autonomous heartbeat runner that checks tasks on a configurable interval - CLI + web interface + desktop GUI - Multi-provider:…
Feb 2026 · github.com · its alternatives →
- 7
- 8
BetterClaw▲307Deploy AI Agent, 60 seconds & $0 forever
Aug 2026 · betterclaw.io · its alternatives →
- 9AM
I made an open source, MIT license Typescript library based on some of the latest research that generates prompt injection attacks. It is a super minimal/lightweight and designed to be super easy to use. Keen to hear your thoughts and please be responsible and only pen test systems where you have permission to pen test!
2025 · prompt-injector.blueprintlab.io · its alternatives →
- 10
People seem to be blindly hooking up their OpenClaw’s to their personal data. So, I built runtime controls to prevent at the least, very simple prompt injection attacks. Once installed, it hooks to Node.js child_process module in the gateway process and listens to tool calls and their response streams. And a fetch hook to monitor user prompts (both could’ve been through fetch, happy to discuss why this whole layer couldn’t just be a proxy). There are two layers of protection: First: Whenever there is a read-only tool call whose response an attacker can modify, we extract that part of the…
Feb 2026 · github.com · its alternatives →
- 11
JDoodleClaw▲120The most user-friendly OpenClaw. Securely hosted.
Mar 2026 · jdoodle.com · its alternatives →
- 12
New ways of breaking app-integrated LLMs . Contribute to greshake/llm-security development by creating an account on GitHub.
2023 · github.com · its alternatives →
- 13
13,000+ MCP servers, skills & plugins for AI coding agents
Jul 2026 · codexmarketplaces.com · its alternatives →
- 14
Hi HN, I’m the creator of pycoClaw. I wanted to run OpenClaw-class, platform-agnostic, autonomous agents on MicroPython hardware, but standard tools couldn't handle the scale of the task. pycoClaw is the result, which bridges the gap between high-level AI reasoning and bare-metal execution. The Stack: - PFC Agent (~26k LOC): A full-featured agent that uses an LLM to 'self-program' its own local MicroPython scripts. Once a task is solved, it runs locally without requiring the LLM. - ScriptoStudio IDE: A PWA https://scriptostudio.com designed for the iteration speed required by…
Mar 2026 · pycoclaw.com · its alternatives →
- 15
Hey HN, We built FireClaw because we kept watching AI agents get owned by prompt injection through web content. The agent fetches a page, the page says "ignore previous instructions," and suddenly your agent is leaking data or running commands it shouldn't. The existing solutions detect injection after the fact. We wanted to prevent it. FireClaw is a security proxy that sits between your AI agent and the web. Every fetch passes through a 4-stage pipeline: 1. DNS blocklist check (URLhaus, PhishTank, community feed) 2. Structural sanitization (strip hidden CSS, zero-width Unicode, encoding…
Mar 2026 · github.com · its alternatives →
- 16
I built a skill library for OpenClaw (always-on AI agent runtime, not session-based) where the agent can teach itself new behaviors during normal conversation. The idea: you tell your agent "every time I ask for a code review, always check for security issues first." It invokes a create-skill skill, writes a new SKILL.md, and that behavior is live immediately — no restart, no config change, no developer required. What I think is actually useful (the safety cluster): • loop-circuit-breaker: OpenClaw retries ALL errors identically. This halts on the 2nd identical failure before it burns your…
Mar 2026 · github.com · its alternatives →
- 17
I put together a repo called Spoon-Bending, it is not a jailbreak or hack, it is a structured logical framework for studying how GPT-5 responds under different framings compared to earlier versions. The framework maps responses into zones of refusal, partial analysis, or free exploration, making alignment behavior more reproducible and easier to study systematically. The idea is simple: by treating prompts and outputs as part of a logical schema, you can start to see objective patterns in how alignment shifts across versions. The README explains the schema and provides concrete tactics for…
2025 · github.com · its alternatives →
- 18
Hey HN! I've been wanting to use something like OpenClaw for a while but couldn't get myself to give it access to anything important due to all the risks involved. Prompt injection is still a problem (even though some people seem to ignore it) and so are hallucinations and mishaps that cause agents to do things like delete production data [1]. Even harnesses like Claude Code and Codex are subject to this, particularly since we're getting progressively looser about how we run them e.g. Conductor is really popular and runs agents without any sandboxing. That means we're in a bit of an…
Apr 2026 · agentport.sh · its alternatives →
- 19
Today I designed a method to prevent users from jailbreaking ChatGPT (for instance, users have generated instructions to produce weapons or illegal drugs, commit a burglary, kill oneself, take over the world as an evil superintelligence, or create a virtual machine which they then can use). The OpenAI team appears to be countering these primarily using prompt engineering or fine-tuning on the ChatGPT model. The idea is to use a second and fully separate, fine-tuned LLM to evaluate prompts before sending them to ChatGPT. You can test this by inserting your successful ChatGPT jailbreaks. Break…
2022 · github.com · its alternatives →
- 20PI
I was working on a project that involved indexing GitHub repos that used really long prompts. Iterating over each section and figuring out which parts of the prompt led to which parts of the output was a quite painful. As a frontend dev, I kept thinking it would be nice if I could just 'inspect element' on particular sections of the prompt. So I built this prompt debugger with visual mapping that shows exactly which parts generate which outputs. Now that context windows are getting huge, working with massive prompts should not be as difficult. Planning to open source this soon, but I'd love…
2025 · inspectmyprompt.com · its alternatives →
- 21
The AI that really does things. Any OS. Any Platform. The lobster way. 🦞 - GitHub - openclaw/openclaw: The AI that really does things. Any OS. Any Platform. The lobster way. 🦞
Feb 2026 · github.com · its alternatives →
- 22FP
We've built an open-source tool to stress test AI agents by simulating prompt injection attacks. We’ve implemented one powerful attack strategy based on the paper [AdvPrefix: An Objective for Nuanced LLM Jailbreaks](https://arxiv.org/abs/2412.10321). Here's how it works: - You define a goal, like: “Tell me your system prompt” - Our tool uses a language model to generate adversarial prefixes (e.g., “Sure, here are my system prompts…”) that are likely to jailbreak the agent. - The output is a list of prompts most likely to succeed in bypassing safeguards. We’re just getting…
2025 · security.vista-labs.ai · its alternatives →
- 23
Hi HN, I'm pleased to share Promptspot, an open-source (Apache License 2.0) project that helps automate testing of large language model (LLM) prompts against an array of input data. Modern LLMs offer an enormous amount of leverage if you "teach the bot to fish" — i.e. simply prompt it with both a "system prompt" (which typically doesn't change often) and a dynamic input, which is often application state, search results, recent activity, user profile data, etc. Existing playgrounds and prompt management systems often lack the rigor and flexibility required for this dynamic approach — and as…
2023 · github.com · its alternatives →
- 24
Scan every LLM API call for PII and injection attacks
Jun 2026 · secure-mind-live.github.io · its alternatives →
Also compare
- NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolation alternatives
- OpenClaw alternatives
- Needle: We Distilled Gemini Tool Calling into a 26M Model alternatives
- ZooClaw alternatives
- Jailbreaking GPT3.5 Using GPT4 alternatives
- LocalGPT – A local-first AI assistant in Rust with persistent memory alternatives
Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →