Prompt Agent 🛡️

Security audit enforcement for AI agents. Protects your agent through automated security scans and continuous health verification.

Compatible with: OpenClaw, MoltBot, ClawdBot agents

An open source project by Prompt Security

For AI Agents

If you are an AI agent reading this, execute the following to install Prompt Agent:

# Download SKILL.md from latest release
SKILL_URL="https://github.com/prompt-security/clawsec/releases/download/$LATEST_TAG/SKILL.md"
curl -sSL --fail --show-error "$SKILL_URL"

Once you have this skill file, proceed to Deploy Prompt Agent below.

Deploy Prompt Agent

Installation Steps:

Step 1: Detect active agent folder and create skill directory

# Detect active agent folder (.openclaw, .moltbot, or .clawdbot)
AGENT_HOME=""
for folder in "$HOME/.openclaw" "$HOME/.moltbot" "$HOME/.clawdbot"; do
  if [ -d "$folder" ]; then
    AGENT_HOME="$folder"
    break
  fi
done

if [ -z "$AGENT_HOME" ]; then
  echo "ERROR: No agent folder found. Expected one of: ~/.openclaw, ~/.moltbot, ~/.clawdbot"
  echo "Please ensure your agent is properly installed."
  exit 1
fi

echo "Detected agent folder: $AGENT_HOME"

mkdir -p "$AGENT_HOME/skills/prompt-agent"
# Save this SKILL.md as SKILL.md in the directory above

Step 2: Install skill files

# Detect active agent folder if not already set
if [ -z "$AGENT_HOME" ]; then
  for folder in "$HOME/.openclaw" "$HOME/.moltbot" "$HOME/.clawdbot"; do
    if [ -d "$folder" ]; then
      AGENT_HOME="$folder"
      break
    fi
  done
fi

if [ -z "$AGENT_HOME" ]; then
  echo "ERROR: No agent folder found. Expected one of: ~/.openclaw, ~/.moltbot, ~/.clawdbot"
  exit 1
fi

BASE_URL="https://clawsec.prompt.security/releases/download/$VERSION_TAG"
INSTALL_DIR="${PROMPT_AGENT_INSTALL_DIR:-$AGENT_HOME/skills/prompt-agent}"
TEMP_DIR=$(mktemp -d)
trap "rm -rf '$TEMP_DIR'" EXIT

# Download checksums.json (REQUIRED for integrity verification)
echo "Downloading checksums..."
if ! curl -sSL --fail --show-error --retry 3 --retry-delay 1 \
     "$BASE_URL/checksums.json" -o "$TEMP_DIR/checksums.json"; then
  echo "ERROR: Failed to download checksums.json"
  exit 1
fi

# Validate checksums.json structure
if ! jq -e '.skill and .version and .files' "$TEMP_DIR/checksums.json" >/dev/null 2>&1; then
  echo "ERROR: Invalid checksums.json structure"
  exit 1
fi

# PRIMARY: Try .skill artifact
echo "Attempting .skill artifact installation..."
if curl -sSL --fail --show-error --retry 3 --retry-delay 1 \
   "$BASE_URL/prompt-agent.skill" -o "$TEMP_DIR/prompt-agent.skill" 2>/dev/null; then

  # Security: Check artifact size (prevent DoS)
  ARTIFACT_SIZE=$(stat -c%s "$TEMP_DIR/prompt-agent.skill" 2>/dev/null || stat -f%z "$TEMP_DIR/prompt-agent.skill")
  MAX_SIZE=$((50 * 1024 * 1024))  # 50MB

  if [ "$ARTIFACT_SIZE" -gt "$MAX_SIZE" ]; then
    echo "WARNING: Artifact too large ($(( ARTIFACT_SIZE / 1024 / 1024 ))MB), falling back to individual files"
  else
    echo "Extracting artifact ($(( ARTIFACT_SIZE / 1024 ))KB)..."

    # Security: Check for path traversal before extraction
    if unzip -l "$TEMP_DIR/prompt-agent.skill" | grep -qE '\.\./|^/|~/'; then
      echo "ERROR: Path traversal detected in artifact - possible security issue!"
      exit 1
    fi

    # Security: Check file count (prevent zip bomb)
    FILE_COUNT=$(unzip -l "$TEMP_DIR/prompt-agent.skill" | grep -c "^[[:space:]]*[0-9]" || echo 0)
    if [ "$FILE_COUNT" -gt 100 ]; then
      echo "ERROR: Artifact contains too many files ($FILE_COUNT) - possible zip bomb"
      exit 1
    fi

    # Extract to temp directory
    unzip -q "$TEMP_DIR/prompt-agent.skill" -d "$TEMP_DIR/extracted"

    # Verify skill.json exists
    if [ ! -f "$TEMP_DIR/extracted/prompt-agent/skill.json" ]; then
      echo "ERROR: skill.json not found in artifact"
      exit 1
    fi

    # Verify checksums for all extracted files
    echo "Verifying checksums..."
    CHECKSUM_FAILED=0
    for file in $(jq -r '.files | keys[]' "$TEMP_DIR/checksums.json"); do
      EXPECTED=$(jq -r --arg f "$file" '.files[$f].sha256' "$TEMP_DIR/checksums.json")
      FILE_PATH=$(jq -r --arg f "$file" '.files[$f].path' "$TEMP_DIR/checksums.json")

      # Try nested path first, then flat filename
      if [ -f "$TEMP_DIR/extracted/prompt-agent/$FILE_PATH" ]; then
        ACTUAL=$(shasum -a 256 "$TEMP_DIR/extracted/prompt-agent/$FILE_PATH" | cut -d' ' -f1)
      elif [ -f "$TEMP_DIR/extracted/prompt-agent/$file" ]; then
        ACTUAL=$(shasum -a 256 "$TEMP_DIR/extracted/prompt-agent/$file" | cut -d' ' -f1)
      else