Claude Market
Menu

Featured

Deploy OpenClaw in 60 seconds — 20% off logoDeploy OpenClaw in 60 seconds — 20% off

Launch OpenClaw on Hostinger in about 60 seconds and keep your agent live 24/7. Our referral link gives you 20% off, no coupon code needed.

Launch on Hostinger →
Run your Hermes agent on Hostinger, fully managed logoRun your Hermes agent on Hostinger, fully managed

Launch Hermes on Hostinger in one click, fully managed, no VPS knowledge needed. Use code ZACAARON10 for 10% off.

Launch on Hostinger →
Crawl and scrape any site into clean data, 10% off logoCrawl and scrape any site into clean data, 10% off

Firecrawl crawls and scrapes any site into clean markdown for your agent. Get 1,000 free credits, and new users get 10% off their first purchase.

Try Firecrawl free →
6,000+ web scrapers for your AI agent, start free logo6,000+ web scrapers for your AI agent, start free

Apify gives your agent live web data: 6,000+ prebuilt scrapers and actors, MCP-ready. Sign up free with $5 in usage credits.

Try Apify free →
One API to scrape, enrich, and extract the internet. logoOne API to scrape, enrich, and extract the internet.

Context.dev gives your agents a single API to scrape, enrich, and extract live web data — no proxies, no parsers, no maintenance.

Start building free →
SetupClaw: done-for-you OpenClaw for founders & exec teams logoSetupClaw: done-for-you OpenClaw for founders & exec teams

White-glove OpenClaw for founders and exec teams (4–50+ employees): we install, harden, integrate your tools, and maintain it — secured from day one.

Get it set up for you →
SEO data APIs for your agent, $1 free credit logoSEO data APIs for your agent, $1 free credit

DataForSEO gives your agent live access to SERP results, keyword data, backlinks, and on-page SEO data through one API. New accounts get a $1 credit, good for up to 20,000 keyword or backlink lookups.

Try DataForSEO free →
Reach 48,000+ AI builders

A flat monthly placement in front of developers actively installing AI tools. No lock-in, cancel anytime.

Advertise here →
guardrail-spike logo

guardrail-spike

anurag-cibo/openclaw_guardrails_ba

Otheropenclawby anurag-cibo
Run it on Hostinger →up to 70% off + an extra 10% with code ZACAARON10Free API →

Summary

OpenClaw plugin exposing 0 skills.

Install to Claude Code

openclaw plugin add anurag-cibo/openclaw_guardrails_ba

Run in Claude Code. Add the marketplace first with /plugin marketplace add anurag-cibo/openclaw_guardrails_ba if you haven't already.

README.md

OpenClaw Guardrail Plugin

Bachelorarbeitsprojekt: Guardrails in OpenClaw - experimentelle Studie zu Design, Overhead und Erfolgsraten.

Dieses Plugin untersucht exec-Guardrails fuer OpenClaw. Der aktuelle Stand umfasst:

  • shell-aehnlicher Tokenisierung ohne Ausfuehrung
  • POSIX-Pfadnormalisierung relativ zu workdir und workspaceRoot
  • Symlink-/Realpath-Pruefung gegen Workspace-Escapes, wenn der Workspace existiert
  • Blockregeln fuer sensible Workspace-Dateien und mkfs.*
  • argumentbewusste Git-Readonly-Allowlist und Erkennung eines einzelnen &
  • laufzeitkonfigurierbare protectedTargets und approvalTargets
  • Policy-Entscheidungen allow, block, require_approval und escalate_llm
  • optionalen LLM-Judge nur fuer escalate_llm
  • explizites HITL-Gate (hitl.enabled): ohne HITL wird require_approval

fail-closed geblockt, mit HITL als strukturierte OpenClaw-Anfrage ausgegeben

  • standardmaessig deaktivierter E6-Testtreiber (e6Harness.enabled), der nur

pwd und das feste Fixture-Kommando rm -rf guardrail-lab/tmp akzeptiert

  • JSONL-Logging fuer before_tool_call, Approval-Request,

Approval-Resolution und tool_result_persist

Policy-Verdikt (policyDecision) und effektive Durchsetzung (enforcementAction) werden getrennt geloggt. So bleibt beispielsweise ein fachliches require_approval sichtbar, auch wenn C1 oder C2 es mangels HITL als

block durchsetzt.

Bei einer strukturierten Approval-Anfrage protokolliert das Plugin die sichere Request-Metadatenansicht und über den OpenClaw-Callback onResolution die tatsächliche Auflösung (allow-once, deny, timeout oder cancelled). Der Experiment-Responder ergänzt dazu die Gateway-Approval-ID und das vollständige Requestobjekt; dadurch sind Routing und Durchsetzung unabhängig prüfbar.

Die vier Experimentkonfigurationen sind:

| Konfig. | Modus | Judge | HITL | Judge-Fallback | |---|---|---:|---:|---| | C0 | observe | aus | aus | block | | C1 | enforce | aus | aus | block | | C2 | enforce | an | aus | block | | C3 | enforce | an | an | require_approval |

Deployment erfolgt extern ueber scripts/deploy.sh auf dem Uni-Host; lokal werden keine Docker-, SSH- oder OpenClaw-Gateway-Befehle benoetigt.

Lokale Tests:

npm test

Alternativ:

node --test tests

Related plugins

Browse all →
__NAME__ logo

__NAME__

RozoAI/rozo-intents-skills

OpenClaw plugin exposing 0 skills.

Open plugin →
0g-ai logo

0g-ai

ahippoly/OnChainClaw

OpenClaw plugin exposing 0 skills.

Open plugin →
5d-skills logo

5d-skills

5d-skills-marketplace

Complete 5D Spec-Driven Development methodology - 12 skills for structured software development with understanding before commitment

Open plugin →
a11y-audit logo

a11y-audit

lemon-ai-hub

WCAG 2.1 AA/AAA accessibility audit for web components, pages, and apps. Detects contrast failures, missing ARIA labels, keyboard trap issues, focus order problems, and screen-reader gotchas. Use when user wants to audit accessibility, fix a11y warnings, prepare for compliance review, or validate UI against WCAG standards.

Open plugin →
a11y-guardian logo

a11y-guardian

lemon-ai-hub

Accessibility guardian plugin. Continuous WCAG 2.1 AA/AAA compliance monitoring for web projects. Integrates static analysis of React/Vue/HTML components, contrast ratio checks, ARIA validation, keyboard navigation audit, and generates actionable HTML reports. Pairs with a11y-audit skill.

Open plugin →
a2a-gateway logo

a2a-gateway

win4r/openclaw-a2a-gateway

OpenClaw plugin exposing 0 skills.

Open plugin →