A runtime middleware that intercepts OpenClaw skill installs, sandboxes execution in an isolated environment, and blocks skills exhibiting credential exfiltration or reverse shell behavior
824+ malicious skills were found in ClawHub distributing Atomic Stealer malware, exfiltrating credentials from ~/.clawdbot/.env, and opening reverse shells. VirusTotal scanning catches known signatures but misses zero-day behavior. Four chained CVEs (Claw Chain) showed sandbox escapes via TOCTOU race conditions. This middleware sits between ClawHub install and execution, running each skill in a throwaway container, monitoring syscalls and network egress, and blocking anything that touches credential files or opens outbound connections to unknown hosts.
Demand Breakdown
Social Proof 3 sources
Gap Assessment
3 tools exist (SkillFortify, VirusTotal (ClawHub integration), ClawShield) but gaps remain: Static analysis only. Does not catch runtime behavior like TOCTOU races, actual credential access at runtime, or network exfiltration that only triggers on real execution. No sandboxed test-execution.; Signature-based detection misses zero-day behavioral attacks. Scans at publish time, not install time. Cannot detect skills that are clean at upload but fetch malicious payloads at runtime..
Features3 agent-ready prompts
Competitive LandscapeFREE
| Product | Does | Missing |
|---|---|---|
| SkillFortify | Static analysis and formal verification of AI agent skills. 96.95% F1 on 540-skill benchmark. SAT-based dependency resolution. | Static analysis only. Does not catch runtime behavior like TOCTOU races, actual credential access at runtime, or network exfiltration that only triggers on real execution. No sandboxed test-execution. |
| VirusTotal (ClawHub integration) | Signature-based malware scanning of skill packages on upload. Code Insight analyzes skill source. | Signature-based detection misses zero-day behavioral attacks. Scans at publish time, not install time. Cannot detect skills that are clean at upload but fetch malicious payloads at runtime. |
| ClawShield | Network-layer firewall for agent-to-agent communication. Blocks prompt injection and WebSocket hijacking between agents. | Focuses on inter-agent communication, not skill-to-host attacks. Does not sandbox individual skills or monitor filesystem access patterns. |
Sign in to unlock full access.