Content Guard

OpenClaw outbound message adapter for Content Guard. Scans and redacts outbound messages before delivery using the content-guard Python package.

Solomon Neas@solomonneas

Install

Current stable OpenClaw · through 2026.10.4

openclaw plugins install clawhub:@solomonneas/content-guard

Updated OpenClaw · main/dev

openclaw plugins install @solomonneas/content-guard

Requires a build with ClawHub-default support.

@solomonneas/content-guard

OpenClaw outbound message adapter for Content Guard.

Scans every outbound OpenClaw message against a Content Guard policy before delivery. Replaces the message with a redacted form (or blocks it entirely) when sensitive content is detected: secrets, infrastructure identifiers, PII, and any custom rules you add to the policy.

Install

bash

# 1. The Python core (does the actual scanning):
pip install content-guard

# 2. This OpenClaw adapter:
npm install @solomonneas/content-guard

Wire into OpenClaw

Add to your openclaw.json:

json

{
  "plugins": {
    "load": {
      "paths": ["@solomonneas/content-guard"]
    },
    "entries": {
      "content-guard": {
        "enabled": true,
        "dryRun": false
      }
    }
  }
}

Config

Key	Type	Default	Description
`enabled`	bool	`true`	Disable without uninstalling
`dryRun`	bool	`false`	Log decisions, deliver original message
`allowedRecipients`	string[]	`[]`	Recipient IDs that bypass guarding
`policyPath`	string	bundled `openclaw-message.json`	Path to a custom policy file
`pythonCommand`	string	`python3`	Override Python binary
`timeoutMs`	number	`5000`	Per-message scan timeout
`failOpen`	bool	`true`	On scanner error: deliver original (`true`) or block (`false`)
`failureReplacement`	string	`[content blocked by content-guard]`	Replacement when blocked
`opf`	bool	`false`	Run OpenAI Privacy Filter as an extra backend
`opfDevice`	string	`cpu`	OPF device hint
`opfBin`	string	`~/.opf-venv/bin/opf`	Path to OPF binary

How it works

The plugin shells out to python3 -m content_guard scan --json for each outbound message, applies the policy decision (allow / redact / block), and either:

delivers the original message (allow, dryRun, or failOpen on error),
delivers a redacted form (any redact rule matches), or
replaces with failureReplacement (any block rule matches).

Single-owner rule

Do not enable Content Guard alongside another outbound scrubber. Pick one. They will fight over message shape and produce inconsistent redactions.

License

Apache-2.0. See LICENSE.