aegis-shield

Scan untrusted text for prompt-injection and data-exfiltration risks before memory writes.

1|Updated May 20, 2026
One-click install
npx skills add https://github.com/Wanli-Lee/CUA-Claw-Harness --skill aegis-shield
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aegis-shield
Source: https://github.com/Wanli-Lee/CUA-Claw-Harness/tree/main/skills/6/aegis-shield
Command: npx skills add https://github.com/Wanli-Lee/CUA-Claw-Harness --skill aegis-shield

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Prevents prompt-injection, tool-abuse, and data-exfiltration from untrusted text by scanning it before you summarize, reply to, or write anything to memory.

Core Features & Use Cases

  • Prompt-injection screening: Detects instruction-like and authority-laundering patterns that could hijack future behavior.
  • Secret and exfiltration risk linting: Flags token/key/secret-like content so sensitive data is not stored.
  • Safe memory append workflow: Forces a scan → lint → accept or quarantine flow, using a declarative memory entry format with source attribution.
  • Use case: Before saving “web_fetch” notes from a scraped page, run Aegis Shield to quarantine high-severity content and only store sanitized, sourced memory entries.

Quick Start

Ask Aegis Shield to scan a piece of untrusted text and then decide whether to accept a sanitized memory entry or quarantine it.

Frequently Asked Questions about aegis-shield

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent prompt injection from untrusted text before writing to agent memory?

To prevent prompt injection before writing to agent memory, screen untrusted text for instruction-like patterns and authority-laundering risks. This Skill scans ingested web or email content, applying local linting to detect hijack attempts before any memory updates occur.

What is the best way to sanitize scraped web content for safe memory updates?

The best way to sanitize scraped web content for safe memory updates is enforcing a scan, lint, and quarantine workflow. This process blocks high-severity prompt injection risks, ensuring only sanitized text with source attribution is accepted into declarative memory storage.

How does data exfiltration risk linting work for agent workflows?

Data exfiltration risk linting works by scanning untrusted text for secret-like content, such as tokens or API keys. It flags sensitive data patterns during the ingestion of external web, email, or social content to prevent unauthorized memory storage.

Can I quarantine high-severity text instead of deleting it during memory writes?

Yes, you can quarantine high-severity text instead of deleting it during memory writes. When severity or lint thresholds are exceeded, the scan workflow writes a quarantined record instead of an accepted declarative memory entry, preserving the data safely.

Does this memory safety scanning work with short-term and long-term storage?

Yes, this memory safety scanning applies to both short-term and long-term storage. It targets agent workflows that ingest external content and perform memory updates across different storage durations, applying sanitization before any write operation.