Openclaw Prompt Shield

• Analyzed: May 10, 2026, 6:50 AM
• Findings: 1
• Version: 0.4.4
• Hash: a95e3f6517b02a824233b1e7ac09ea7b1f38ac18d938faebc0d3e5b9b86137b1
• Source: palm
• External report: View on VirusTotal

Findings (1)

The openclaw-prompt-shield skill is a defensive security tool designed to detect and sanitize prompt-injection and data-exfiltration attempts in agent inputs. While the bundle contains numerous high-risk keywords and exfiltration host signatures (e.g., 'webhook.site', 'ngrok' in references/exfil-hosts.txt), these are used exclusively as detection patterns for the scanning engine in scripts/_patterns.py and scripts/_core.py. The code is well-documented, uses only the Python standard library, lacks any network-capable modules, and implements strict path validation to prevent shell injection, confirming its intent is purely protective.