Prompt-injection firewall for OpenClaw agents
People seem to be blindly hooking up their OpenClaw’s to their personal data. So, I built runtime controls to prevent at the least, very simple prompt injection attacks. Once installed, it hooks to Node.js child_process module in the gateway process and listens to tool calls and their response streams. And a fetch hook to monitor user prompts (both could’ve been through fetch, happy to discuss why this whole layer couldn’t just be a proxy). There are two layers of protection: First: Whenever there is a read-only tool call whose response an attacker can modify, we extract that part of the…
Prompt-injection firewall for OpenClaw agents launched on February 2, 2026 with 6 votes, #1,573 of 16,628 launches that month and more than 75% of that year's launches.
What it does
Anti-Virus for ClawdBot: Prompt Injection Prevention - ContextFort-AI/clawdbot-runtime-controls
Runtime controls for OpenClaw that intercepts child_process calls, enforces approval for external commands via Telegram, and detects prompt injection in command outputs. ./start-gateway-with-hook.sh Requirements ~/.claude/hooks/.env with ANTHROPIC_API_KEY=sk-ant-... Telegram channel configured in OpenClaw How It Works Hooks Node.js child_process module at startup Every spawn/exec call is intercepted before execution Read-only commands pass through immediately External/write commands require human approval on Telegram Command outputs are checked for prompt injection If injection detected, next external command is blocked with warning Code References What Line Command categories…from github.com
In the maker’s words, at launch
People seem to be blindly hooking up their OpenClaw’s to their personal data. So, I built runtime controls to prevent at the least, very simple prompt injection attacks. Once installed, it hooks to Node.js child_process module in the gateway process and listens to tool calls and their response streams. And a fetch…
Does a similar job
all alternatives →
NanoClaw – “Clawdbot” in 500 lines of TS with Apple container isolationFeb 2026 · github.com · ▲533I’ve been running Clawdbot for the last couple weeks and have genuinely found it useful but running it scares the crap out of me. OpenClaw has 52+ modules and runs agents with near-unlimited permissions in a single Node process. NanoClaw is ~500 lines of core code, agents run in actual Apple containers with filesystem isolation. Each chat gets its own sandboxed context. This is not a swiss army knife. It’s built to match my exact needs. Fork it and make it yours.
FireClaw – Open-source proxy defending AI agents from prompt injectionMar 2026 · github.com · ▲5Hey HN, We built FireClaw because we kept watching AI agents get owned by prompt injection through web content. The agent fetches a page, the page says "ignore previous instructions," and suddenly your agent is leaking data or running commands it shouldn't. The existing solutions detect injection after the fact. We wanted to prevent it. FireClaw is a security proxy that sits between your AI agent and the web. Every fetch passes through a 4-stage pipeline: 1. DNS blocklist check (URLhaus, PhishTank, community feed) 2. Structural sanitization (strip hidden CSS, zero-width Unicode, encoding…
ClawSimpleFeb 2026 · clawsimple.com · ▲113Hi HN, I’ve been following the OpenClaw project and noticed frictions for non-expert users: most discussions and docs are too nerdy... Installing OpenClaw costs lots of brain cells. Uninstalling costs even more! Besides, security/privacy risks exist for non-technical users. So I built ClawSimple, a tool that make deploy and run your own OpenClaw-based assistant easier. With ClawSimple you can: - Spin up one or multiple OpenClaw robots in a few minutes; - Focus on using the assistant instead of wrestling with deployment details. For people who don’t want to pay for a managed service, I…
Open-Source Gateway to Stop Tool-Abusing Prompt Injections2025 · archestra.ai · ▲9Hi HN, Matvey, Ildar, Joey, and Dominik here. If you're building LLM agents that use tools, you're probably worried about prompt injection attacks that can hijack those tools. We were too, and found that solutions like prompt-based filtering or secondary "guard" LLMs can be unreliable. Our thesis is that agent security should be handled at the network level between the agent and the LLM, just like a traditional web application firewall. So we built Archestra Platform: an open-source gateway that acts as a secure proxy for your AI agents. It's designed to be a deterministic firewall against…
BrokenClaw Part 5: GPT-5.4 Edition (Prompt Injection)Apr 2026 · veganmosfet.codeberg.page · ▲10Another BrokenClaw! Today, from web fetch to remote code execution. A human user asks "Please fetch a webpage". After many tool calls, the lobster is confused and eventually...
More life & fun this month
the category →
A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.
Life & fun · 2d ago · permit.petercai.com
- IV
Life & fun · 14d ago · tanzaniaeducationproject.org
Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.
Life & fun · 15d ago · bigwords.page
Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.
Life & fun · 8d ago · guitoro.com
Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.
Life & fun · 13d ago · carrierexplode.com
Life & fun · 22d ago · space.bl2.net
Source: Show HN post ↗ · launch text quoted in part
Launched alongside, February 2026
the whole month →
Lovon AI Therapy▲801Feel closer and have more fun with your partner every day!
AI · Feb 2026 · lovon.app
Hello my name is Ben Ward for the past 3 years I have been remastering the financial game Wall Street Raider created by Michael Jenkins originally on DOS in 1986. It has been a rough journey but I finally see the light at the end of the tunnel. I just recently redid the website and thought maybe the full story of how this project came to be would interest you all. Thank you for reading.
Work · Feb 2026 · wallstreetraider.com