<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom"><title>Todd Schiller - OpenClaw</title><link href="https://toddschiller.com/" rel="alternate"></link><link href="https://toddschiller.com/feeds/tag/openclaw.atom.xml" rel="self"></link><id>https://toddschiller.com/</id><updated>2026-06-01T00:00:00-04:00</updated><subtitle>Human ✘ Artificial Intelligence</subtitle><entry><title>Introducing agent-browser-shield (alpha): keeping AI agents safe in the browser</title><link href="https://toddschiller.com/blog/agent-browser-shield-alpha.html" rel="alternate"></link><published>2026-06-01T00:00:00-04:00</published><updated>2026-06-01T00:00:00-04:00</updated><author><name>Todd Schiller</name></author><id>tag:toddschiller.com,2026-06-01:/blog/agent-browser-shield-alpha.html</id><summary type="html">Announcing the alpha of agent-browser-shield — a source-available defense layer (also available as an OpenClaw skill) that blocks prompt injection and dark patterns before they reach your agent.</summary><content type="html">&lt;p&gt;There are 6 billion internet users. With AI agents, we're quickly heading to
60 to 600 billion &amp;quot;users&amp;quot; of the web.&lt;/p&gt;
&lt;p&gt;How do we keep all those agents safe when they touch the browser?&lt;/p&gt;
&lt;p&gt;At PixieBrix, we've spent years protecting BPO contact centers from insider
risk, fraud, and social engineering in the browser.&lt;/p&gt;
&lt;p&gt;Today, we're applying that defense to AI agents and making a free,
source-available, browser extension available (on GitHub and ClawHub).&lt;/p&gt;
&lt;p&gt;Your AI agent that lands on a fresh page is one prompt injection away from
leaking credentials, one dark pattern away from buying the wrong thing, and
one fake review away from a bad recommendation.&lt;/p&gt;
&lt;p&gt;Agent Browser Shield sits between the browser and the agent. It blocks:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Prompt injection: visible or hidden instructions in page content&lt;/li&gt;
&lt;li&gt;Dark patterns: manipulative UI designed to trick/coerce&lt;/li&gt;
&lt;li&gt;Context pollution: low-value context that impairs instruction following&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;A useful side effect: stripping irrelevant content also cuts token burn.&lt;/p&gt;
&lt;p&gt;Come join us on our mission. File issues, send PRs, or just tell me what you
hate/love!&lt;/p&gt;
&lt;p&gt;The threat surface for agentic browsing is evolving fast. Let's defend our AI
assistants together!&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;⭐ Star the GitHub repo: &lt;a href="https://github.com/pixiebrix/agent-browser-shield"&gt;https://github.com/pixiebrix/agent-browser-shield&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;🦞 Star the OpenClaw skill: &lt;a href="https://clawhub.ai/pixiebrix/agent-browser-shield"&gt;https://clawhub.ai/pixiebrix/agent-browser-shield&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;img src="/assets/images/agent-browser-shield-alpha/demo.webp" alt="Side-by-side demo: an unprotected agent vs. one shielded by agent-browser-shield" loading="lazy" decoding="async" /&gt;&lt;/p&gt;
</content><category term="AI"></category><category term="AI"></category><category term="agents"></category><category term="browser security"></category><category term="prompt injection"></category><category term="PixieBrix"></category><category term="OpenClaw"></category></entry></feed>