ClawGuard

ClawGuard is a security-first filtering server that sits between external inputs (email, webhooks) and LLM agents, preventing prompt injection, secret exfiltration, and malicious content from ever reaching the AI. It connects to Gmail via GCP Pub/Sub for real-time email ingestion, runs a deterministic sanitization pipeline that strips HTML/scripts, detects 10+ injection patterns, redacts secrets, removes hidden unicode characters, and scores every message with a 0-100 risk rating. Built for OpenClaw, ClawGuard exposes a REST API for agent skills to query sanitized emails on demand, and includes a live dashboard that visually demonstrates the firewall in action — showing raw vs. sanitized content side-by-side with color-coded risk highlighting.