{"repo":"dedene/claw-wrap","free":true,"listed":false,"github":"https://github.com/dedene/claw-wrap","clone":"git clone https://github.com/dedene/claw-wrap.git","description":"A secure credential proxy for CLI tools. Executes tools with secrets on behalf of sandboxed processes - credentials never enter the sandbox.","language":"Go","stars":138,"topics":["cli","openclaw","proxy","security"],"license":"MIT","category":"cli-tools","readme_excerpt":"claw-wrap A secure credential proxy for CLI tools and HTTP APIs. Executes tools with secrets on behalf of sandboxed processes, or injects credentials into HTTP requests via MITM proxy — credentials never enter the sandbox. Install · Config · Sandbox · Protocol --- The Problem You're running an AI agent in a sandbox. The agent needs to call gh to interact with GitHub — list repos, read issues, check PRs. So you give it your GH TOKEN . Now the agent has full access to your GitHub account. It can read private repos, push code, delete repositories, create tokens. Any process in the sandbox can grab the token from the environment. One prompt injection and your credentials are exfiltrated. claw-wrap solves this. The agent calls gh repo list like normal, but: 1. gh is actually a symlink to claw-wrap 2. claw-wrap connects to a daemon running outside the sandbox 3. The daemon injects credentials, executes gh , and streams the output back 4. The agent gets the results. The token never enters the sandbox. You can also block dangerous commands server-side — the agent can gh repo list but not gh repo delete . How It Works Two Modes claw-wrap supports two approaches for credential injection: Mode Best For How It Works --------------- --------------------------- ------------------------------------------------------------ CLI Wrapper CLI tools (gh, aws, gcloud) Symlink intercepts command, daemon executes with credentials HTTP Proxy HTTP APIs, curl, SDKs MITM proxy injects auth headers into ","default_branch":null,"files":null,"tree":[],"storefront":"/r/dedene","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/dedene/claw-wrap/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}