clawdefender

---
name: clawdefender
description: Security scanner and input sanitizer for AI agents. Detects prompt injection, command injection, SSRF, credential exfiltration, and path traversal attacks. Use when (1) installing new skills from ClawHub, (2) processing external input like emails, calendar events, Trello cards, or API responses, (3) validating URLs before fetching, (4) running security audits on your workspace. Protects agents from malicious content in untrusted data sources.
---

# ClawDefender

Security toolkit for AI agents. Scans skills for malware, sanitizes external input, and blocks prompt injection attacks.

## Installation

Copy scripts to your workspace:

```bash
cp skills/clawdefender/scripts/clawdefender.sh scripts/
cp skills/clawdefender/scripts/sanitize.sh scripts/
chmod +x scripts/clawdefender.sh scripts/sanitize.sh
```

**Requirements:** `bash`, `grep`, `sed`, `jq` (standard on most systems)

## Quick Start

```bash
# Audit all installed skills
./scripts/clawdefender.sh --audit

# Sanitize external input before processing
curl -s "https://api.example.com/..." | ./scripts/sanitize.sh --json

# Validate a URL before fetching
./scripts/clawdefender.sh --check-url "https://example.com"

# Check text for prompt injection
echo "some text" | ./scripts/clawdefender.sh --check-prompt
```

## Commands

### Full Audit (`--audit`)

Scan all installed skills and scripts for security issues:

```bash
./scripts/clawdefender.sh --audit
```

Output shows clean skills (✓) and flagged files with severity:
- 🔴 **CRITICAL** (score 90+): Block immediately
- 🟠 **HIGH** (score 70-89): Likely malicious
- 🟡 **WARNING** (score 40-69): Review manually

### Input Sanitization (`sanitize.sh`)

Universal wrapper that checks any text for prompt injection:

```bash
# Basic usage - pipe any external content
echo "some text" | ./scripts/sanitize.sh

# Check JSON API responses
curl -s "https://api.example.com/data" | ./scripts/sanitize.sh --json

# Strict mode - exit 1 if injectio