KnightClaw: Local Security Extension for OpenClaw Agents
KnightClaw is a security extension designed to protect OpenClaw AI coding agents from adversarial prompts. The tool addresses a specific threat model where a single malicious message in the context window can cause an agent to follow attacker instructions instead of user commands.
Core Features
KnightClaw operates as a drop-in extension with no configuration required, no API keys, and no cloud dependency. It intercepts every message before it reaches the agent.
Detection System
The guard uses an 8-layer hybrid detection approach:
- Regex patterns
- Homoglyph detection
- Boundary token analysis
- Perplexity scoring
- Entropy analysis
- Heuristics
- Semantic embeddings (using a local, quantized BGE model)
Blocks occur in microseconds.
Additional Security Measures
- Egress redaction: Strips secrets from outbound responses before they leave the agent
- Hash-chained audit logs: Tamper-proof, append-only logs with full timeline of every block, allow, and config change
- Velocity circuit breaker: 10 blocks in 60 seconds triggers automatic lockdown with no manual intervention
- Kill switch: One command stops everything:
openclaw knight lockdown on
Technical Details
The extension runs entirely local with zero telemetry and is MIT licensed. The source is available for testing and contribution.
📖 Read the full source: r/openclaw
👀 See Also
Hackerbot-Claw: AI Bot Exploiting GitHub Actions Workflows
An AI-powered bot called hackerbot-claw executed a week-long automated attack campaign against CI/CD pipelines, achieving remote code execution in at least 4 out of 6 targets including Microsoft, DataDog, and CNCF projects. The bot used 5 different exploitation techniques and exfiltrated a GitHub token with write permissions.
Three Email-Based Attack Vectors Against AI Agents That Read Email
A Reddit post details three specific methods attackers can use to hijack AI agents that process email: Instruction Override, Data Exfiltration, and Token Smuggling. These exploit the agent's inability to distinguish legitimate instructions from malicious ones embedded in email text.
Fil-C Makes setjmp/longjmp and ucontext Memory Safe
Fil-C implements setjmp/longjmp and ucontext APIs without stack corruption or dangling pointers, preventing common misuse that leads to crashes or exploits.
Introducing SkillFence: The New Runtime Monitor That Watches What Skills Actually Do
SkillFence offers a breakthrough in monitoring AI agent actions, addressing the need for transparency and security in AI-driven environments. Discover how this innovative tool can enhance control over autonomous processes.