Prompt injection guardrails for OpenClaw, Hermes, Pi, Codex, Claude Code, and other autonomous AI agents.
Users
37
+4 in 30 days
Rating
5.0 / 5
unchanged in 30 days
Ratings
1
0 in 30 days
Store rank
#121K
#101K among extensions
Version
1.0.3
updated 2 Aug 2026
Users
monthly, 8 months
Latest, 16 Oct 2026:37 usersMove the mouse over the chart for any month
Ratings count
monthly, 8 months
Latest, 16 Oct 2026:1 ratingsMove the mouse over the chart for any month
The Chrome Web Store rounds user counts down to the leading digit, so the user line moves in steps. The ratings count is exact and is the better signal of real adoption.
About AI Agent Guardrails
🛡️ AI Agent Guardrails — Prompt Injection Protection for Autonomous AI Agents
Browser-based AI agents can encounter malicious instructions hidden inside web pages. AI Agent Guardrails adds a local safety layer that detects suspicious content and warns or blocks your agent before it acts.
⚡ Real-Time Prompt Injection Detection
Scans page content for instruction overrides, role manipulation, delimiter injection, encoding attacks, and system prompt leak attempts. When detected risk crosses your configured threshold, the extension displays a prominent warning or replaces the page with a hard block.
🚫 Optional Email Action Protection
Agent Safety Mode hides common send and compose controls on supported webmail pages, reducing the risk of unintended email actions.
🌐 Custom Site Controls
Whitelist trusted domains to skip scanning. Blocklist untrusted domains to prevent agents from reading or acting on their content.
📋 Local Scan History
Review up to 100 recent scan results, including the page, time, severity score, detected threat types, and action taken. History stays inside your browser and can be cleared at any time.
🔒 Configurable Guardrails
Choose which threat types to detect and configure separate thresholds for warnings and hard blocks.
Local by design - Scanning uses the bundled Vard detection library and runs entirely inside your browser. Page content and scan results are never sent to us. No accounts, telemetry, analytics, or cloud processing. Settings and history remain in local browser storage.
Designed for browser-based agent workflows involving OpenClaw, Hermes, Pi, Codex, Claude Code, and other autonomous AI agents.