OpenClaw browser extension: choose tab access before automation
OpenClaw browser extension access is safest when you choose the right browser profile, limit eligible tabs, and keep signed-in Chrome work separate from routine agent browsing.
Tag archive
AI Agent Security
30 articles connected to this topic.
AI agent secret egress: bind credentials to exact hosts
AI agent secret egress controls keep shared credentials tied to approved HTTPS hosts, so a tool cannot send a usable secret to a lookalike or unexpected destination.
AI agent SSRF protection for browser automation
AI agent SSRF protection keeps browser automation from reaching private services by default. Use a narrow hostname allowlist, explicit exceptions, and network egress controls.
AI agent security: keep diagnostics from leaking credentials
AI agent security includes diagnostic privacy. Use bounded logs, owner-only status views, and tested redaction so a useful incident record does not expose credentials.
AI agent approval queue: keep risky actions reviewable
AI agent approval queues keep risky actions attached to the right reviewer, evidence, timeout, and session state, so a late click cannot revive stale work or block safe automation.
MCP session isolation for AI agents: keep tool connections separate
MCP session isolation keeps an AI agent's tool connection, state, and credentials tied to the requesting session so one conversation cannot inherit another's capabilities.
OpenClaw mobile app: pair iOS or Android with your Gateway
OpenClaw mobile app pairing connects an iOS or Android companion to your Gateway with a short-lived setup code, explicit scopes, and a private network path.
AI agent workspace: a practical control plane for terminal work
An AI agent workspace keeps sessions, terminal access, approvals, files, and recovery visible so people can direct long-running work without treating a chat transcript as the system of record.
Self-hosted AI agent security: what OpenClaw keeps under your control
Self-hosted AI agent security starts with knowing which data, access, and execution boundaries you own. Use this OpenClaw checklist before exposing a gateway or adding tools.
AI agent hook policies in OpenClaw 2026.6.10: keep approvals trusted after composition
AI agent hook policies need to survive plugin composition, retries, and channel handoffs. OpenClaw 2026.6.10 keeps trusted tool policies attached to approval-sensitive flows.
AI agent update safety starts with downgrade-safe release checks
AI agent update safety means treating version checks, release tags and dependency patches as control-plane decisions, not background maintenance noise.
Gemini CLI auth isolation for AI agents: stop ambient credentials from hijacking runs
Gemini CLI auth isolation keeps AI agents on the intended Google login, preventing ambient machine credentials from silently changing model access or audit trails.
AI agent browser sessions in OpenClaw 2026.6.6
AI agent browser sessions get safer in OpenClaw 2026.6.6 with CDP session attach, WebSocket validation, browser-output boundaries and loopback MCP transport checks.
AI agent configuration management needs safer config patches
AI agent configuration management fails when patches widen silently. OpenClaw 2026.6.6 uses explicit array replacement and consent-bound paths to reduce config drift.
AI agent transcript redaction: stop raw images from becoming permanent memory
AI agent transcript redaction keeps screenshots, data URLs and repaired image payloads out of durable logs before they become memory, export data or prompt context.
AI agent install policy: why skill installs need resolved commits
AI agent install policy turns skill and plugin installs into governed supply-chain events: resolved commits, policy checks, trusted pins and auditable install state.
Chain-of-thought leakage in AI agents: keep reasoning out of user replies
Chain-of-thought leakage is a production risk for AI agents. Learn where reasoning traces escape, why channel adapters matter, and how OpenClaw reduces exposure.
AI agent security boundaries in OpenClaw 2026.5.27
AI agent security boundaries in OpenClaw 2026.5.27 separate untrusted prompts, tool execution, network exposure and approvals so agent failures stay contained.
AI agent auth profiles: separate model logins without breaking agent runs
AI agent auth profiles separate model credentials by provider, runtime, and operator so self-hosted agents can migrate logins, recover cleanly, and reduce credential blast radius.
xAI device code OAuth for headless AI agents
xAI device code OAuth lets headless AI agents authorize from SSH, containers, and remote hosts without a localhost browser callback or pasted API key.
AI agent policy checks in OpenClaw 2026.5.20: what changed and how to use them
AI agent policy checks in OpenClaw 2026.5.20 add a practical control layer for channels, approvals, sandbox visibility, and workspace repair.
AI agent tool policies: sender-scoped permissions for dangerous tools
AI agent tool policies should vary by sender, channel, and action risk. OpenClaw 2026.5.12 adds sender-scoped controls for safer self-hosted agents.
How to sandbox AI agent code execution on a self-hosted setup
A practical 2026 guide to sandboxing AI agent code execution on your own hardware. Compares Docker, gVisor, Firecracker microVMs, and ephemeral containers, with a recommended setup for self-hosted agents.
Semantic Kernel RCE shows why AI agent tool inputs need real boundaries
Microsoft's Semantic Kernel RCE research shows how prompt injection becomes code execution when agents can influence tool parameters. Here's how to reduce the blast radius.
OpenClaw skill security checklist: what to review before you install
A practical checklist for reviewing OpenClaw skills and MCP servers before they get access to your files, accounts, shell, or APIs.
AI Agent Audit Logs: What to Capture Before Agents Take Action
AI agent audit logs need identity, authority, prompts, tool calls, policy checks, and outcomes. Use this checklist before autonomous workflows go live.
Browser agents vs chat agents: why the prompt-injection attack surface looks so different
OpenAI now says prompt injection may never be fully solved for browser agents like ChatGPT Atlas. Here is what that means for chat-channel agents and self-hosted setups.
How to Vet AI Agent Skills: A 6-Step Security Checklist
Vet AI agent skills before installing them with this 6-step security checklist: source trust, permissions, prompt injection, scripts, sandbox testing, and updates.
Arctic Wolf Launches the 'World's Largest Agentic SOC' — Hundreds of AI Agents Now Run Security Operations
Arctic Wolf's Aurora Agentic SOC deploys hundreds of specialized AI agents to handle security operations, powered by a 'Swarm of Experts' framework. It's agent-led, human-supervised — and available at no extra cost to existing customers.
Geordie AI Wins RSAC 2026 Innovation Sandbox — AI Agent Governance Takes the Crown
Geordie AI, a security and governance platform built specifically for AI agents, was named 'Most Innovative Startup' at RSAC 2026's Innovation Sandbox contest. The win signals that agent governance is now the hottest problem in cybersecurity.