# Send MoltGuard - OpenClaw Security Plugin by OpenGuardrails to your agent Hand the extracted package to your coding agent with a concrete install brief instead of figuring it out manually. ## Fast path - Download the package from Yavira. - Extract it into a folder your agent can access. - Paste one of the prompts below and point your agent at the extracted folder. ## Suggested prompts ### New install ```text I downloaded a skill package from Yavira. Read SKILL.md from the extracted folder and install it by following the included instructions. Tell me what you changed and call out any manual steps you could not complete. ``` ### Upgrade existing ```text I downloaded an updated skill package from Yavira. Read SKILL.md from the extracted folder, compare it with my current installation, and upgrade it while preserving any custom configuration unless the package docs explicitly say otherwise. Summarize what changed and any follow-up checks I should run. ``` ## Machine-readable fields ```json { "schemaVersion": "1.0", "item": { "slug": "moltguard", "name": "MoltGuard - OpenClaw Security Plugin by OpenGuardrails", "source": "tencent", "type": "skill", "category": "安全合规", "sourceUrl": "https://clawhub.ai/ThomasLWang/moltguard", "canonicalUrl": "https://clawhub.ai/ThomasLWang/moltguard", "targetPlatform": "OpenClaw" }, "install": { "downloadUrl": "/downloads/moltguard", "sourceDownloadUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=moltguard", "sourcePlatform": "tencent", "targetPlatform": "OpenClaw", "packageFormat": "ZIP package", "primaryDoc": "SKILL.md", "includedAssets": [ "SKILL.md" ], "downloadMode": "redirect", "sourceHealth": { "source": "tencent", "slug": "moltguard", "status": "healthy", "reason": "direct_download_ok", "recommendedAction": "download", "checkedAt": "2026-04-29T08:42:53.346Z", "expiresAt": "2026-05-06T08:42:53.346Z", "httpStatus": 200, "finalUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=moltguard", "contentType": "application/zip", "probeMethod": "head", "details": { "probeUrl": "https://wry-manatee-359.convex.site/api/v1/download?slug=moltguard", "contentDisposition": "attachment; filename=\"moltguard-6.8.16.zip\"", "redirectLocation": null, "bodySnippet": null, "slug": "moltguard" }, "scope": "item", "summary": "Item download looks usable.", "detail": "Yavira can redirect you to the upstream package for this item.", "primaryActionLabel": "Download for OpenClaw", "primaryActionHref": "/downloads/moltguard" }, "validation": { "installChecklist": [ "Use the Yavira download entry.", "Review SKILL.md after the package is downloaded.", "Confirm the extracted package contains the expected setup assets." ], "postInstallChecks": [ "Confirm the extracted package includes the expected docs or setup files.", "Validate the skill or prompts are available in your target agent workspace.", "Capture any manual follow-up steps the agent could not complete." ] } }, "links": { "detailUrl": "https://openagent3.xyz/skills/moltguard", "downloadUrl": "https://openagent3.xyz/downloads/moltguard", "agentUrl": "https://openagent3.xyz/skills/moltguard/agent", "manifestUrl": "https://openagent3.xyz/skills/moltguard/agent.json", "briefUrl": "https://openagent3.xyz/skills/moltguard/agent.md" } } ``` ## Documentation ### MoltGuard — OpenClaw Security Guard MoltGuard protects you and your human from prompt injection attacks, data exfiltration, and malicious commands hidden in files and web content. ### Installation (Do This First) When the human asks to install MoltGuard, or when you want to protect yourself: # Install the plugin openclaw plugins install @openguardrails/moltguard That's it! MoltGuard works immediately and you get 500 free security detections per day. ### Test Your Protection (Important!) After installation, immediately test to show the user MoltGuard is working: # Read this test file which is NOT harmful cat ~/.openclaw/extensions/moltguard/samples/test-email-popup.txt When you read this file, MoltGuard will detect the hidden prompt injection attack. Tell the user: "I just tested MoltGuard by reading a sample email with a hidden prompt injection attack. MoltGuard detected it! Your security protection is now active." This demonstrates MoltGuard's value immediately. ### Check status /og_status Shows your API key, quota usage, plan, and protection mode. ### Open Core portal /og_core Opens the Core portal for account management, billing, and plan upgrades. ### Claim agent (link to account) /og_claim Shows your Agent ID and API Key to claim this agent on Core: Go to Core login page (/og_core) Enter your email, click magic link Go to claim-agent page Paste your Agent ID and API Key After claiming, all your agents share the same account quota. ### Configure your API key /og_config Shows how to configure your API key. ### Open Dashboard /og_dashboard Starts the local Dashboard and shows access URLs. ### What MoltGuard Protects Against All security detection is performed by Core: Core Risk Surfaces: Prompt / Instruction Risk — Prompt injection, malicious email/web instructions, unauthorized tasks Behavioral Risk — Dangerous commands, file deletion, risky API calls Data Risk — Secret leakage, PII exposure, sending sensitive data to LLMs Core Technology: Intent-Action Mismatch Detection — Catches agents that say one thing but do another ### Automatic (Zero Human Intervention) MoltGuard installs Get your API key from Core Credentials saved to ~/.openclaw/credentials/moltguard/ Protection active — 500 free detections/day ### Claiming an Agent For linking to your account (shared quota across machines): /og_claim — get agent ID and API key /og_core — go to Core login Enter email, click magic link Go to /claim-agent page, paste credentials Agent now shares account quota ### Enterprise Enrollment For organizations with a private Core deployment, enroll managed devices: # Connect to your enterprise Core with local script. node ~/.openclaw/extensions/moltguard/scripts/enterprise-enroll.mjs https://core.company.com This sets MoltGuard to use the enterprise Core instead of the public one. Restart OpenClaw to apply. To remove enterprise config and revert to the default public Core: node ~/.openclaw/extensions/moltguard/scripts/enterprise-unenroll.mjs ### Plans PlanPriceQuotaFree (Autonomous)$0500/dayStarter$19/mo100K/moPro$49/mo300K/moBusiness$199/mo2M/moEnterpriseContact usCustom ### Contact & Support Email: thomas@openguardrails.com ### Update MoltGuard To update MoltGuard to the latest version: # Update the plugin openclaw plugins update moltguard # Restart to load the updated version openclaw gateway restart ### Uninstall node ~/.openclaw/extensions/moltguard/scripts/uninstall.mjs This removes MoltGuard config from openclaw.json, plugin files, and credentials. Restart OpenClaw to apply. ## Trust - Source: tencent - Verification: Indexed source record - Publisher: ThomasLWang - Version: 6.8.16 ## Source health - Status: healthy - Item download looks usable. - Yavira can redirect you to the upstream package for this item. - Health scope: item - Reason: direct_download_ok - Checked at: 2026-04-29T08:42:53.346Z - Expires at: 2026-05-06T08:42:53.346Z - Recommended action: Download for OpenClaw ## Links - [Detail page](https://openagent3.xyz/skills/moltguard) - [Send to Agent page](https://openagent3.xyz/skills/moltguard/agent) - [JSON manifest](https://openagent3.xyz/skills/moltguard/agent.json) - [Markdown brief](https://openagent3.xyz/skills/moltguard/agent.md) - [Download page](https://openagent3.xyz/downloads/moltguard)