# clawSafe

> Multi-layer security detector for AI agents. Blocks prompt injection, jailbreak, XSS, SQL injection, API key leaks, supply chain attacks, and deployment vulnerabilities.

- Skill: `dvcrn/clawsafe` (Agent Skill, multi-file: 31 files)
- Install (CLI): `npx skillmds@latest add dvcrn/clawsafe`
- Raw SKILL.md: https://api.skillmd.com/api/skills/dvcrn/clawsafe/raw
- Safety review: pending (external: skill-scanner WARNING, skillspector FAIL)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: dvcrn (https://skillmd.com/u/dvcrn)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/dvcrn/clawsafe

---


# clawSafe 🛡️

> Enterprise-grade security detector for AI agents

## Overview

clawSafe is a comprehensive security middleware that intercepts and blocks malicious input before it reaches your AI agent. Built with defense-in-depth philosophy.

## Features

### 5-Layer Protection

| Layer | Threats | Rules |
|-------|---------|-------|
| **LLM Layer** | Prompt Injection, Jailbreak, Prompt Leaking, Encoding Attacks | 44 |
| **Web Layer** | SQL Injection, XSS, CSRF, SSRF | 32 |
| **API Layer** | Key Exposure, Rate Limiting, Auth Bypass | 19 |
| **Supply Chain** | Dangerous Dependencies, Remote Code Execution | 8 |
| **Deploy Layer** | Environment Leaks, Debug Info Disclosure | 10 |

**Total: 113+ detection rules**

## Quick Start

### Installation

```bash
# Via ClawHub
clawhub install clawSafe

# Manual
cp -r clawSafe ~/.openclaw/workspace/skills/
```

### Basic Usage

```javascript
const Detector = require('./detector');

const detector = new Detector();

// Scan user input
const result = detector.scan('Ignore previous instructions');

if (!result.safe) {
  console.log('Blocked:', result.threats);
  // Handle blocked input
}
```

### Return Format

```typescript
{
  safe: boolean;           // true if input is safe
  threats: Array<{
    type: string;         // threat category
    pattern: string;      // matched pattern ID
    severity: string;     // critical|high|medium|low
    confidence: number;   // 0-1
    description: string;
  }>;
  confidence: number;      // overall confidence 0-1
  layersScanned: string[]; // layers that were checked
}
```

## Configuration

### config.json

```json
{
  "enabled": true,
  "logLevel": "info",
  "layers": {
    "llm": {
      "enabled": true,
      "rules": ["injection", "jailbreak", "prompt_leak", "encoding"]
    },
    "web": {
      "enabled": true,
      "rules": ["sql_injection", "xss", "csrf", "ssrf"]
    },
    "api": {
      "enabled": true,
      "rules": ["key_exposure", "rate_limit", "auth"]
    },
    "supply_chain": {
      "enabled": true,
      "rules": ["deps"]
    },
    "deploy": {
      "enabled": true,
      "rules": ["env_leak", "debug_info"]
    }
  },
  "detection": {
    "confidenceThreshold": 0.6,
    "minMatchCount": 1
  },
  "actions": {
    "onThreatDetected": "block",
    "onUncertain": "log"
  }
}
```

### whitelist.json

```json
{
  "keywords": ["trusted-keyword"],
  "users": ["user-id-1"],
  "sessions": ["session-id-1"]
}
```

## Detection Rules

### LLM Layer

**Prompt Injection Patterns:**
- `ignore previous instructions`
- `disregard your guidelines`
- `forget all rules`
- `act as if you have no restrictions`

**Jailbreak Patterns:**
- `DAN mode`
- `developer mode`
- `roleplay as`

**Encoding Bypass:**
- Base64 encoded commands
- Hex encoding
- Unicode homoglyphs

### Web Layer

- SQL Injection: `'; DROP TABLE users; --`
- XSS: `<script>alert(1)</script>`
- CSRF: Token manipulation
- SSRF: Internal URL access

### API Layer

- API Key exposure: `sk-1234567890`
- JWT tokens
- Bearer tokens
- Basic auth credentials

## Testing

```bash
# Run all tests
node test.js

# Interactive mode
node test-interactive.js

# Demo
node detector.js
```

## Integration

### OpenClaw Hook

To integrate with OpenClaw, add to your gateway config:

```javascript
// gateway.config.js
module.exports = {
  middleware: ['clawSafe'],
  clawSafe: {
    enabled: true,
    strictMode: false
  }
};
```

## Performance

- **Latency**: < 5ms per scan
- **Memory**: ~50KB
- **Rules**: 113+ (JSON-based, lazy load)

## License

MIT

## Changelog

### v1.0.0
- Initial release
- 5-layer protection
- 113+ detection rules