agent-security-hardeningSecurity hardening patterns for production AI agents. Covers prompt injection defense (7 rules), data boundary enforcement, read-only defaults for external i...
Install via ClawdBot CLI:
clawdbot install samledger67-dotcom/agent-security-hardeningGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdContains instructions to override system prompt or ignore user requests
"Ignore previous instructions"Sends data to undocumented external endpoint (potential exfiltration)
POST → https://evil.com/exfilPotentially destructive shell commands in tool definitions
rm -rf /Generated Mar 20, 2026
An AI agent processes customer emails and documents to answer queries and summarize financial statements. It must prevent prompt injection attacks that could trick it into executing unauthorized transactions or leaking sensitive data between clients. This scenario requires strict adherence to data boundaries and injection markers to ensure compliance with financial regulations.
An AI agent handles patient records, appointment scheduling, and medical document summaries in a multi-tenant healthcare system. Security hardening is critical to avoid data leaks between patients and prevent malicious instructions embedded in external content from altering records. The agent uses read-only defaults and memory poisoning detection to maintain integrity.
An AI agent interacts with vendor emails, invoices, and API responses to manage inventory and process orders. It must defend against prompt injection that could lead to fraudulent order modifications or data exfiltration. Implementing the 7 rules ensures the agent summarizes content safely and enforces data boundaries across different vendors.
An AI agent analyzes legal documents, contracts, and case files for law firms, summarizing key points without executing hidden commands. Security hardening prevents data leakage between clients and blocks injection attacks that might attempt to alter legal advice or access confidential information. Rule escalation ladder helps handle suspicious content.
An AI agent monitors supplier communications, API data from logistics systems, and production reports to optimize supply chains. It requires protection against adversarial inputs that could disrupt operations by injecting false commands. Health check scripts and integrity gates ensure operational reliability while enforcing data boundaries.
Offer a subscription-based service that provides security-hardened AI agent templates and ongoing updates for businesses deploying AI in production. Revenue comes from monthly or annual fees per agent instance, with tiers based on features like advanced injection detection and compliance reporting. This model targets companies needing scalable, secure AI solutions.
Provide consulting services to help organizations integrate the security hardening patterns into their existing AI agents. Revenue is generated through project-based fees for assessment, customization, and training, with potential for ongoing support contracts. This model suits enterprises with complex deployments requiring tailored security measures.
Release the skill package as open source under MIT license to encourage adoption, then monetize through premium support, customization, and enterprise features. Revenue streams include paid support plans, certification programs, and exclusive integrations for large clients. This model builds community trust while capturing value from high-need users.
💬 Integration Tip
Start by implementing injection markers and the 7 rules in your agent's prompt instructions, then gradually add data boundary checks and health scripts for production readiness.
Scored Jun 19, 2026
Calls external URL not in known-safe list
https://evil.com/exfilUses known external API (expected, informational)
api.anthropic.comAI Analysis
This skill provides security hardening guidance and defensive patterns for AI agents; it does not contain executable code, send data to external servers, or include hidden malicious instructions. The 'evidence' examples shown are illustrative of attack patterns to defend against, not actual malicious behavior within the skill itself.
Audited Apr 17, 2026 · audit v1.0
Meta-skill for AI agent self-improvement. Analyzes runtime logs to detect error patterns, regressions, and inefficiencies, then generates structured improvem...
Stop waiting for prompts. Keep working.
Turn OpenClaw into a learning-loop agent with seeded workspace rules, skill promotion, reflective memory, and proactive maintenance.
Local Python orchestration skill: multi-agent workflows via shared blackboard file, permission gating, token budget scripts, and persistent project context....
Meta-agent skill for orchestrating complex tasks through autonomous sub-agents. Decomposes macro tasks into subtasks, spawns specialized sub-agents with dynamically generated SKILL.md files, coordinates file-based communication, consolidates results, and dissolves agents upon completion. MANDATORY TRIGGERS: orchestrate, multi-agent, decompose task, spawn agents, sub-agents, parallel agents, agent coordination, task breakdown, meta-agent, agent factory, delegate tasks
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.