Plugins
OpenClaw plugin for Gmail (and other IMAP/SMTP mailboxes) using App Passwords. Server-side IMAP search with Gmail X-GM-RAW, multi-term AND, hasAttachment filter, thread fetch, HTML→text fallback, and attachment download to disk.
OpenClaw security plugin — runtime tool call interception, command-level allow/deny/approve, bypass detection, file/network path rules, and audit logging
iFlow Search plugin for OpenClaw — exposes iflow_web_search, iflow_image_search, iflow_web_fetch, and registers (best-effort) as the web_search provider 'iflow'
Automatic prompt-injection screening for OpenCLAW tool calls. Auto-registers a before_tool_call hook that screens web fetch/search results and other untrusted tool content.
You.com OpenClaw plugin — MCP setup metadata and web intelligence skills
OpenClaw plugin — permission and approval engine. Gates built-in tool calls (bash, file edit, etc.) and plugin tools via a three-bucket policy (allow/deny/ask) with wildcard rules, rule sources (session/workspace/user/config), and in-chat approval. No network calls.
Containerized execution for OpenClaw via Validance kernel
You.com OpenClaw plugin — web search, research, and content extraction via You.com APIs
OpenClaw plugin: scans selected agent tool calls (web_fetch, exec, web_search, browser, message) through Interven before execution. Blocks malicious requests, redacts PII/secrets, and routes risky actions to human approval.
OpenClaw plugin that enforces Sanna governance constitutions on AI agent tool execution
