AxonFlow Plugin for OpenClaw: Pre-Run Tool Approval & PII Redaction

A new OpenClaw plugin from AxonFlow adds pre-execution tool argument checking, conditional human approval gates, and outbound message PII redaction — all without modifying agent code. The plugin hooks into OpenClaw's lifecycle hooks and supports self-hosted deployment.

What It Does

• Tool argument validation: Checks arguments before execution — can block or require approval on high-risk calls (even if the tool itself is allowed).
• Outbound message scanning: Scans messages sent to Telegram, Discord, or Slack for PII or secrets before delivery.
• Audit trail: Records tool calls and LLM activity for later review.

Architecture & Limitations

Because AxonFlow uses OpenClaw's lifecycle hooks, no agent code needs to be rewritten. The plugin works with your existing pipeline. It is designed for self-hosted setups: point it at a self-hosted AxonFlow instance to keep the scanning layer inside your infra.

Current limitation: Tool results written into the transcript cannot be scanned because tool_result_persist is sync-only in OpenClaw's current hook model. If that hook becomes async, scanning that path becomes straightforward.

Availability

• Plugin page: clawhub.ai/plugins/@axonflow/openclaw
• Repo/docs: github.com/getaxonflow/axonflow-openclaw-plugin

For devs already running OpenClaw locally, this adds a security boundary without extra infrastructure.