ClawShell isolates OpenClaw and Hermes API keys behind a privileged proxy
At a glance
Runta built ClawShell so OpenClaw/Hermes never hold real LLM API keys—virtual keys map to real ones in a privileged process with DLP scanning and email sender filters. This workflow is listed under security, credentials, sandboxing, openclaw, hermes, dlp.
After prompt-injection experiments exfiltrated session tokens from a standard OpenClaw setup within minutes, they open-sourced ClawShell: a Rust sidecar that sits between OpenClaw or Hermes and upstream LLM APIs, mapping virtual keys to real keys stored under /etc/clawshell, scanning request/response bodies for PII (block or redact), and optionally filtering IMAP email by sender allow/deny lists. An onboard wizard rewires one downstream agent to route through the proxy.
How it went
They framed the threat model as OS-level isolation rather than prompt trust: a hijacked agent gets only a scoped virtual identifier with no real credentials or lateral secret access.
Worth knowing
Secrets still live on the same host under Unix permissions; this is not a full VM sandbox. Streaming SSE responses skip DLP scanning.
Save ideas in this browser. Upvotes count across the board.
A Reddit write-up: student feeds bill screenshots to OpenClaw agent Barry, which parses amount/due date, pays via encrypted AgentPay virtual card through Playwright portals, and texts a receipt—zero late fees in two weeks.
Solo founder Jun Gong onboarded Clawdi (OpenClaw) like a teammate—one job at a time—and now uses it for daily briefings so mornings don't start by doom-scrolling at least three apps, plus social drafts from one idea.
Gumroad guide + free Grok Bot marketplace template (also chapters for Meta Muse Code, ChatGPT Dots, OpenClaw, Hermes): reversible adb/Projectivy on Google TV/Android TV/Fire TV, brand-realistic limits on LG/Samsung/Roku, NextDNS/Pi-hole/AdGuard Home, ACR opt-outs, and a weather/calendar screensaver—approve each change, undo included, your device only.
Lane Rettig reports using an OpenClaw personal agent to organize hospital forms into indexed PDFs, identify missing signatures, and draft an insurance pre-approval submission from previously supplied policy context.