Rules of the Claw: Open Source Security Rule Set for OpenClaw Agents
Production Security Rule Set for OpenClaw Agents
Rules of the Claw is a JSON rule set that acts as a hard deny layer on top of agent tool calls in OpenClaw. It addresses the security risk of agents with broad tool access being vulnerable to bad skill installations or prompt injections that could cause real damage.
Key Security Features
- Blocks destructive executions including
rm -rfon workspace/config directories, pipe-to-shell operations, and curl to unknown executables - Protects credential files from reads and writes:
openclaw.json,auth-profiles.json, and files in.secrets/directory - Guards instruction files (
SOUL.md,AGENTS.md) from unauthorized agent edits - Denylists network reconnaissance tools including nmap, masscan, and netcat
- Blocks agent reads of other agents' auth profiles
Technical Implementation
The rule set contains 139 total rules with three preset configurations: minimal, standard, and strict. It ships with a JSON schema, validation scripts, and a one-command install skill. The key design decision is zero LLM dependency - rules execute at the tool layer via regex patterns, providing microsecond latency. Unlike LLM-based guardrails, regex patterns cannot be socially engineered or prompt-injected.
Availability and Licensing
The project is available at github.com/Bahuleyandr/rules-of-the-claw and is MIT licensed. The creator welcomes pull requests for new rule patterns.
📖 Read the full source: r/openclaw
👀 See Also
Agent Hush: Open-source tool prevents AI coding agents from leaking sensitive data
Agent Hush is an open-source tool that catches sensitive data before it leaves your machine, created after a developer's AI coding agent leaked API keys, server IPs, and personal info to a public GitHub repo while building a security project.
Three Email-Based Attack Vectors Against AI Agents That Read Email
A Reddit post details three specific methods attackers can use to hijack AI agents that process email: Instruction Override, Data Exfiltration, and Token Smuggling. These exploit the agent's inability to distinguish legitimate instructions from malicious ones embedded in email text.
OpenClaw Skill Analyzer: Static Security Scanner for AI Agent Skills
A developer built a static analyzer that scans OpenClaw skills for security risks before installation, with 40+ detection rules across 12 categories including prompt injection and data exfiltration.
Google TIG Reports First AI-Generated Zero-Day Exploit in the Wild
Google Threat Intelligence Group has identified a threat actor using a zero-day exploit believed to be developed with AI, marking the first observed offensive use of AI for zero-day vulnerability exploitation.