frontpage.

Hi HN!

I built ClawShield after discovering 40,214 OpenClaw instances exposed with critical CVE-2026-25253 (CVSS 8.8).

The problem: AI agents communicate with each other at scale, but there's NO firewall between them. A compromised agent can inject prompts, exfiltrate data, and hijack WebSocket sessions.

ClawShield sits between agents and blocks: - Prompt injection (16+ patterns) - Malicious skills/plugins (AST + sandbox) - Credential leaks (regex + entropy) - Unauthorized agent-to-agent comms - WebSocket hijacking

Built it last night. 181 tests. Production-ready. Open source (AGPL-3.0).

GitHub: https://github.com/DEFNOISE-AI/ClawShield Demo: [coming soon]

Compatible with OpenClaw, AutoGPT, or any agent protocol.

Free tier for personal use, paid for teams/enterprise.

Would love your feedback!

Show HN: Rebrain.gg – Doom learn, don't doom scroll

Show HN: VectorNest responsive web-based SVG editor

Show HN: Formally verified FPGA watchdog for AM broadcast in unmanned tunnels

Show HN: CEL by Example

Show HN: Codereport – track TODOs, refactors, and bugs in your repo with a CLI

Show HN: I'm launching a LPFM radio station

Show HN: Trust Protocols for Anthropic/OpenAI/Gemini

Show HN: Breadboard – A modern HyperCard for building web apps on the canvas

Show HN: Env-rx – Catch missing .env variables before they break your CI

Show HN: gwt-zsh – Stupidly simple Git worktree management

Show HN: SkillForge – Turn screen recordings into agent skill files

Show HN: Echo, an iOS SSH+mosh client built on Ghostty

Show HN: macOS native DAW with Git branching model

Show HN: AsteroidOS 2.0 – Nobody asked, we shipped anyway

Show HN: Sports-skills.sh – sports data connectors for AI agents

Show HN: Pg-typesafe – Strongly typed queries for PostgreSQL and TypeScript

Show HN: OtherFunc – Serverless functions in Brainfuck, Forth, BASIC, and more

Show HN: I taught LLMs to play Magic: The Gathering against each other

Show HN: ClawShield – Open-source firewall for agent-to-agent AI communication

Show HN: A search engine with 0.01 second latency

Show HN: Keystone – configure Dockerfiles and dev containers for any repo

Show HN: Glitchy camera – a circuit-bent camera simulator in the browser

Show HN: I built a "Socratic" AI to stop my daughter from copy-pasting homework

Show HN: I wrote a technical history book on Lisp

Show HN: Design Token Spec Implemented

Show HN: A Unix environment in a single HTML file (420 KB)

Show HN: Growl Owl 2 RL Reasoner

Show HN: Wakapadi – Meet locals and travelers nearby and join free walking tours

Show HN: Hardware.dog: automated schematic and PCB review

Show HN: Nonograms – Friends-only puzzle room with replays and leaderboards

Show HN: Rebrain.gg – Doom learn, don't doom scroll

Show HN: VectorNest responsive web-based SVG editor

Show HN: Formally verified FPGA watchdog for AM broadcast in unmanned tunnels

Show HN: CEL by Example

Show HN: Codereport – track TODOs, refactors, and bugs in your repo with a CLI

Show HN: I'm launching a LPFM radio station

Show HN: Trust Protocols for Anthropic/OpenAI/Gemini

Show HN: Breadboard – A modern HyperCard for building web apps on the canvas

Show HN: Env-rx – Catch missing .env variables before they break your CI

Show HN: gwt-zsh – Stupidly simple Git worktree management

Show HN: SkillForge – Turn screen recordings into agent skill files

Show HN: Echo, an iOS SSH+mosh client built on Ghostty

Show HN: macOS native DAW with Git branching model

Show HN: AsteroidOS 2.0 – Nobody asked, we shipped anyway

Show HN: Sports-skills.sh – sports data connectors for AI agents

Show HN: Pg-typesafe – Strongly typed queries for PostgreSQL and TypeScript

Show HN: OtherFunc – Serverless functions in Brainfuck, Forth, BASIC, and more

Show HN: I taught LLMs to play Magic: The Gathering against each other

Show HN: ClawShield – Open-source firewall for agent-to-agent AI communication

Show HN: A search engine with 0.01 second latency

Show HN: Keystone – configure Dockerfiles and dev containers for any repo

Show HN: Glitchy camera – a circuit-bent camera simulator in the browser

Show HN: I built a "Socratic" AI to stop my daughter from copy-pasting homework

Show HN: I wrote a technical history book on Lisp

Show HN: Design Token Spec Implemented

Show HN: A Unix environment in a single HTML file (420 KB)

Show HN: Growl Owl 2 RL Reasoner

Show HN: Wakapadi – Meet locals and travelers nearby and join free walking tours

Show HN: Hardware.dog: automated schematic and PCB review

Show HN: Nonograms – Friends-only puzzle room with replays and leaderboards

Show HN: ClawShield – Open-source firewall for agent-to-agent AI communication

Comments