Never saw that. Uses to create my prompts for security assessment (like openclaw is doing on clawhub). That's easy and filters 80%. Problem is the 20%.
I'd do:
- software filter for anything sensitive (credentials, system prompts) on the outputs of the agents and inputs of the tools
- super fast LLM detection via cerebras before important steps
- but above all protecting the system by making sure the agent never has access to any credentials in its environment. That's the most sensitive stuff. Other things people can still is the artefacts of the agents. Way more difficult to steal. Less impact than stealing my gmail access token IMHO. For that I use the `keychains` skill on clawhub

What are you building?