openclaw-guardianA security layer plugin for OpenClaw that intercepts dangerous tool calls (exec, write, edit) through two-tier regex blacklist rules and LLM-based intent ver...
Install via ClawdBot CLI:
clawdbot install fatcatmaofei/openclaw-guardianGrade Good — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Accesses sensitive credential files or environment variables
/etc/passwdPotentially destructive shell commands in tool definitions
rm -rf /Accesses system directories or attempts privilege escalation
/etc/sudoersCalls external URL not in known-safe list
https://github.com/fatcatMaoFei/openclaw-guardian.gitGenerated Mar 20, 2026
In a DevOps pipeline, this plugin safeguards automated scripts from accidental or malicious commands like 'rm -rf' on production directories or unauthorized system modifications. It ensures only user-intended operations proceed, preventing costly downtime and data loss while maintaining fast execution for routine tasks.
For a customer support AI that accesses files or executes commands to resolve issues, Guardian intercepts risky actions such as editing system configs or running privileged commands. It uses LLM verification to confirm user requests, reducing false blocks and ensuring safe, efficient assistance without manual oversight.
In an educational setting where students use AI to learn coding and system operations, this plugin prevents dangerous commands like 'sudo' or file deletions outside sandboxed areas. It balances safety with learning by allowing verified actions, protecting institutional infrastructure from accidental misuse.
For media or publishing companies using AI to manage digital assets, Guardian secures file writes and edits by blocking unauthorized changes to critical paths like configuration files. It ensures only approved modifications occur, safeguarding content integrity and preventing data corruption.
In financial institutions where AI agents handle sensitive data files, this plugin enforces strict controls on exec and write operations, such as preventing shell injections or unauthorized edits to audit logs. Its hash-chain audit logging provides tamper-evidence for compliance and security audits.
Offer a free basic version with core blacklist features and limited audit logs, then charge for advanced capabilities like custom rule sets, priority support, and enhanced LLM models. Revenue comes from subscriptions targeting enterprises needing higher security and customization.
Sell annual licenses to large organizations for integration into their AI agent platforms, including features like on-premise deployment, detailed analytics, and compliance reporting. Revenue is generated through tiered pricing based on the number of agents or transactions.
Provide Guardian's security layer as a cloud API, allowing developers to call it for intent verification and blacklist matching without local installation. Revenue streams include pay-per-use token costs for LLM calls and monthly API access fees.
💬 Integration Tip
Ensure your OpenClaw provider config includes a cheap, fast LLM model like Haiku to minimize latency and cost for intent verification, and regularly review the audit logs to fine-tune blacklist rules based on usage patterns.
Scored Apr 19, 2026
AI Analysis
The skill's stated purpose is to add a security layer, and its logic (regex blacklists, LLM verification) aligns with that goal. The primary risk is the external LLM API call for intent verification, which could send command/context data to an external provider, but this is consistent with the skill's function and uses the user's existing config.
Audited Apr 16, 2026 · audit v1.0
Use the ClawdHub CLI to search, install, update, and publish agent skills from clawdhub.com. Use when you need to fetch new skills on the fly, sync installed skills to latest or a specific version, or publish new/updated skill folders with the npm-installed clawdhub CLI.
Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...
Transcribe YouTube videos to text by extracting captions and subtitles directly from the video URL using yt-dlp without audio processing.
Manage a self-hosted Trello-like board via `wekancli`. Create, move and archive cards, lists and boards on a WeKan server. Use when user asks about task boar...
Proactive security monitoring, threat scanning, and auto-remediation for OpenClaw deployments
Create or improve SOUL.md files for OpenClaw agents through guided conversation. Use when designing agent personality, crafting a soul, or saying "help me create a soul". Supports self-improvement.