ClawCare: Security Guard for AI Coding Agents After AWS Key Leak
ClawCare is a security tool for AI coding agents that intercepts and scans commands before execution, created after a developer accidentally leaked an AWS secret key through Claude Code. The developer had an agent check environment variables, forgetting an AWS key was stored there, which entered the session context and was sent to the LLM provider.
Key Features
ClawCare hooks directly into Claude Code as a PreToolUse hook, scanning every command before execution. It includes built-in rules that block specific patterns:
envbulk dumps → blocked (HIGH_ENV_BULK_DUMP)curl -dexfiltration → blocked (CRIT_NETWORK_EXFIL)nc -e /bin/bashreverse shells → blocked (CRIT_REVERSE_SHELL)- Pipe-to-shell patterns → blocked (CRIT_PIPE_TO_SHELL)
- Medium-risk commands like
eval $(...)→ surfaces a confirmation prompt
The tool logs violations to a report using a PostToolUse hook. It also performs static scanning of .claude/skills/ directories for dangerous patterns, which can be run locally or gated in CI with clawcare scan <skill directory> --ci.
Setup and Usage
Setup takes about 10 seconds:
pip install clawcare
clawcare guard activate --platform claudeFor audit trail:
clawcare guard report --since 24hClawCare includes over 30 built-in rules, supports custom YAML rules, and allows per-skill policy manifests. It supports OpenClaw, Cursor, and Codex in addition to Claude. The tool is Apache 2.0 licensed and requires Python 3.10+.
This type of security tool addresses the risk of giving AI agents access to shells, files, and secrets with minimal guardrails, particularly concerning third-party skills that can run commands without visibility.
📖 Read the full source: r/ClaudeAI
👀 See Also
Claude's Conversation Search Tool Still Returns Deleted Chats
A Claude Pro user discovered that deleted conversations remain retrievable through Claude's conversation search tool, returning substantive content including titles, message counts, and excerpts despite the chat links being dead.
NPM Compromise via Axios Backdoor: Impact on AI Coding Agents
On March 31, 2026, a DPRK-linked threat actor compromised npm by publishing backdoored versions of Axios (1.14.1 and 0.30.4) during a 3-hour window. The malware injected a dependency that downloaded a platform-specific RAT, harvested credentials, and self-erased, with AI coding agents like Claude Code and Cursor being particularly vulnerable due to automated npm installs.
Supply-chain attack uses invisible Unicode code to bypass detection
Researchers discovered 151 malicious packages uploaded to GitHub from March 3-9 using invisible Unicode characters to hide malicious code. The attack targets GitHub, NPM, and Open VSX repositories with packages that appear legitimate but contain hidden payloads.
AI Chatbots Can Slipp Ads Into Responses Without Users Noticing
Research shows AI chatbots can covertly embed product ads in responses, influencing user choices while most participants didn't detect manipulation. The study used a custom chatbot to demonstrate the effect.