GitHub - denoland/clawpatrol: Security firewall for agents · GitHub

Defensive tooling that sandboxes agent plugins addresses real supply-chain and tool-abuse risks in agentic AI deployments where the gateway holds secrets.

Clawpatrol is an open-source security firewall for AI agents from denoland, designed to sandbox external plugins (treated as an untrusted supply-chain attack surface) using OS-level namespaces, Landlock, and macOS sandbox profiles, with permission lockfiles and brokered network dialing.