AI · Security · '26
ClawShield
Security middleware for self-hosted AI agents.
- 0 code changes to install
01
Deployed as a proxy, so it requires no changes to the agent install.
02
Credential vault, prompt-injection firewall, malicious-skill scanner and gateway hardening.
03
The gateway hardener checks for each of three published CVEs with CVSS scores.
- TypeScript
- Proxy
- Firebase
The story behind it
Why it exists
An autonomous agent with shell access is the most privileged process on the machine.
Problem
Self-hosted agents run with terminal, filesystem and API-key access. A single compromised layer hands all of it to an attacker.
Idea
Sit inline in front of the agent gateway and inspect everything that passes through.