Show HN: GatewayStack – Deny-by-default security for OpenClaw tool calls

**Show HN: GatewayStack – Deny-by-default security for OpenClaw tool calls**

I installed OpenClaw and pointed it at a project directory. Within minutes it had read my .env file. I tried adding a permissions skill to lock things down. Skills are advisory; the LLM can skip the check or be convinced by a prompt injection to bypass it.So I built a plugin that hooks into before_tool_call at the process level. Checks run on every tool call: identity mapping, deny-by-default scope, enforcement, rate limiting, injection detection, and audit logging...

---

**[devsupporter 해설]**

이 기사는 Show HN에서 제공하는 최신 개발 동향입니다. 관련 도구나 기술에 대해 더 알아보시려면 원본 링크를 참고하세요.