SeyZ/clawbands

Registry 信息

项目简介

ClawBands 是 OpenClaw AI 代理的安全中间件，提供防护栏和访问控制以保护代理交互。

要点

• OpenClaw AI 代理的安全中间件
• 强制执行安全代理行为的防护栏
• 代理交互的访问控制
• 使用 TypeScript 构建，可靠性高
• 轻量级且易于集成

使用场景

• 保护生产环境中的 AI 代理部署
• 防止未经授权的代理操作
• 为代理工作流添加合规层
• 监控和记录代理行为

README 摘要

# 🦞 + 🪢 ClawBands <p align="center"> <img src="logo.png" alt="ClawBands Logo" width="300"/> </p> **Put safety bands on [OpenClaw](https://github.com/openclaw/openclaw)** ClawBands is a security middleware for [OpenClaw](https://github.com/openclaw/openclaw) AI agents. It hooks into OpenClaw's plugin system to intercept every tool execution (file writes, shell commands, network requests) and enforces human-in-the-loop approval before dangerous actions execute. [](https://opensource.org/licenses/MIT) [](http://www.typescriptlang.org/) [](https://nodejs.org/) ## Why? OpenClaw can execute shell commands, modify files, and access your APIs. OS-level isolation (containers, VMs) protects your **host machine**, but it doesn't protect the **services your agent has access to**. ClawBands solves this by hooking into OpenClaw's `before_tool_call` plugin event. Before any dangerous action executes (writes, deletes, shell commands, API calls), the agent pauses and waits for your decision. In a terminal, you get an interactive prompt. On messaging channels (WhatsApp, Telegram), the agent asks you YES/NO and relays your answer via a dedicated `clawbands_respond` tool. Every choice is logged to an immutable audit trail. Think of it as `sudo` for your AI agent: nothing happens without your explicit permission. ## Features - 🔒 **Synchronous Blocking** - Agent pauses until you approve - ⚙️ **Granular Control** - Allow reads, ask on writes, deny deletes - 💬 **Channel Support** - Works in terminal, WhatsApp, Telegram via `clawbands_respond` tool - 📊 **Full Audit Trail*

话题