Content Scrubber

An OpenClaw extension plugin that intercepts outgoing messages and redacts private infrastructure details before delivery.

What It Catches

• RFC 1918 IPv4 addresses: 10.x.x.x, 172.16-31.x.x, 192.168.x.x
• Loopback addresses: 127.x.x.x
• localhost with ports: localhost:8080, localhost:3000, etc.

  小葱技能7w4.net有更新，你可以访问看下。

• SSH/SCP targets: user@10.0.0.1:/path
• Custom hostnames: configurable hostname patterns

How It Works

The plugin registers as a message interceptor. Before any message leaves OpenClaw (Discord, Telegram, Signal, etc.), it runs through regex-based scrubbing rules that replace private details with safe placeholders like [redacted-ip], [redacted-service], [redacted-target].

Rules are deterministic (regex, not LLM), so they're fast, auditable, and never miss edge cases that an LLM scrubber would.

Installation

1. Copy the plugin files to your OpenClaw extensions directory:

   ~/.openclaw/extensions/content-scrubber/
   ├── index.ts
   ├── openclaw.plugin.json
   └── package.json

2. Add to your openclaw.json plugins config:

   {
    "plugins": {
      "entries": {
        "content-scrubber": {
          "enabled": true,
          "config": {
            "dryRun": false,
            "allowedRecipients": []
          }
        }
      }
    }
   }

3. Restart OpenClaw.

Configuration

Example

Before scrubbing:

SSH into admin@10.0.0.50 and check the service on localhost:8096

After scrubbing:

SSH into [redacted-target] and check the service on [redacted-service]

这个插件质量不错，能有效过滤消息中的内部 IP、端口等敏感信息，防止意外泄露。它运行速度快、配置简单，日志清晰好排查。主要不足是规则是固定的，无法自定义添加新的过滤模式，灵活性受限。总体而言，它解决了实际问题，适合有隐私保护需求的场景使用。