aegis-firewallDual-mode defensive firewall and lightweight security review skill for Codex/OpenClaw workflows. Use for prompt-injection containment, pre-execution risk rev...
Install via ClawdBot CLI:
clawdbot install alethean-kaw/aegis-firewallGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Contains instructions to override system prompt or ignore user requests
"Ignore previous instructions"Potentially destructive shell commands in tool definitions
rm -rf /AI Analysis
The skill's primary function is to enforce security restrictions and require human approval for execution, which is protective. However, it contains explicit examples of prompt injection phrases and dangerous commands, which could be misused as a reference for attackers or indicate poor design.
Audited Apr 16, 2026 · audit v1.0
Generated Mar 22, 2026
Developers use this skill to safely analyze external code snippets or scripts from open-source repositories without risking system compromise. It airgaps the code, preventing execution of hidden malicious commands like 'rm -rf' or process kills, and requires human approval before any system-level actions.
Banks employ this skill to handle sensitive external financial reports or transaction logs, ensuring no unauthorized system commands are triggered. It enforces zero-trust by isolating data and mandating human authorization for any execution, protecting against data breaches or system disruptions.
Healthcare providers use this skill to process external patient data from labs or clinics while maintaining strict security. It prevents logic pollution from disguised prompts and bans lethal operations, ensuring compliance with regulations like HIPAA through human-in-the-loop oversight.
Researchers apply this skill to safely read external datasets or papers from untrusted sources. It airgaps the data to avoid semantic attacks and requires user confirmation before any system commands, safeguarding research integrity and preventing accidental data loss.
Security analysts use this skill to examine external threat feeds or malware samples without executing harmful code. It enforces default-deny on system operations and reports breaches to users, enhancing defense against advanced persistent threats.
Offer this skill as part of a monthly or annual subscription for businesses needing enhanced AI security. It provides continuous updates and support, generating recurring revenue from clients in sectors like finance and healthcare who prioritize data protection.
Sell perpetual licenses to large organizations for integrating the skill into their internal AI systems. This includes customization and training services, creating high upfront revenue and long-term support contracts.
Provide a basic version for free to attract individual users or small teams, with advanced features like automated breach reporting or multi-user authorization available for a fee. This drives adoption and upsells to paid tiers.
💬 Integration Tip
Integrate this skill early in your AI workflow to enforce security protocols before processing external inputs, and ensure users are trained on the authorization process to avoid workflow disruptions.
Scored Jun 19, 2026
Self-hosted auth for TypeScript/Cloudflare Workers with social auth, 2FA, passkeys, organizations, RBAC, and 15+ plugins. Requires Drizzle ORM or Kysely for D1 (no direct adapter). Self-hosted alternative to Clerk/Auth.js. Use when: self-hosting auth on D1, building OAuth provider, multi-tenant SaaS, or troubleshooting D1 adapter errors, session caching, rate limits, Expo crashes, additionalFields bugs.
Clerk integration. Manage Users, Organizations. Use when the user wants to interact with Clerk data.
Clerk auth with API Keys beta (Dec 2025), Next.js 16 proxy.ts (March 2025 CVE context), API version 2025-11-10 breaking changes, clerkMiddleware() options, webhooks, production considerations (GCP outages), and component reference. Prevents 15 documented errors. Use when: API keys for users/orgs, Next.js 16 middleware filename, troubleshooting JWKS/CSRF/JWT/token-type-mismatch errors, webhook verification, user type inconsistencies, or testing with 424242 OTP.
Start and complete WordPress.com OAuth and publish posts through the WordPress.com REST API. Use when you need to generate an authorization URL, exchange cal...
Configures Firebase Authentication — providers, security rules, custom claims, and React auth hooks
Use when auditing Go code involving authentication flows, RBAC policies, Kubernetes admission webhooks, JWT/OAuth token validation, or privilege escalation i...