I built a default-deny firewall for local AI agents (OpenClaw/Hermes) — it gates every tool call and asks me before anything risky

Reddit r/openclaw Tools
ai-safety agent-framework firewall open-source prompt-injection security local-ai

Summary

A default-deny firewall daemon for local AI agents that intercepts every tool call, blocking dangerous actions and requesting user approval for ambiguous ones, with tamper-evident logging. Designed to mitigate prompt injection risks. Open source under MIT license.

I got nervous running agents with full access to my machine — prompt injection means a booby-trapped file or webpage can hijack them into doing damage with my permissions. So I built a small daemon that sits between the agent and the OS: every tool call is checked against a default-deny policy. Dangerous stuff (reading .env, rm -rf) is hard-blocked, ambiguous stuff pings my phone to approve/deny, everything's logged in a tamper-evident chain. It's a "second lock, not a vault" — I'm upfront in the README about what it can't stop (a fully compromised agent bypassing its own tool layer). Open source, MIT. Would genuinely love people to poke holes in the threat model: https://github.com/VickyTarun89/clawguard
Original Article

Similar Articles

Claw Patrol: an open-source security firewall for agents

Lobsters Hottest

Deno open-sources Claw Patrol, a security firewall for AI agents that routes traffic through a tunnel, parses protocols, injects credentials, and enforces rules to prevent dangerous actions like SQL deletions or kubectl commands.

Show HN: Claw Patrol, a security firewall for agents

Hacker News Top

Claw Patrol is a security firewall for AI agents, sitting between agents and production to parse traffic and gate actions using HCL rules, blocking destructive SQL or requiring human approval for risky commands like kubectl delete pod.