OpenClaw
Open-source personal AI assistant that runs locally on your devices and connects to messaging platforms like WhatsApp, Telegram, and Slack, with autonomous capabilities to execute commands, manage files, and control your browser.
Why It Matters
OpenClaw achieved 135,000 GitHub stars and triggered Mac Mini shortages by offering the most powerful autonomous AI agent available—but security researchers from Microsoft, Cisco, Kaspersky, and others have issued urgent warnings. With malware-infected skills, exposed API keys, and fundamental architectural security flaws, it represents both the promise and peril of agentic AI. Multiple organizations recommend uninstalling it immediately unless running in completely isolated environments.
Limitations
Over 512 vulnerabilities identified including 8 critical security flaws · 12% of ClawHub marketplace skills found to be malicious · Over 135,000 instances exposed on internet with unsafe defaults · Vulnerable to prompt injection attacks that persist in agent memory · Requires Terminal knowledge and proper security configuration · Can burn through millions of API tokens costing hundreds of dollars
Ethics & Responsibility
- 512 vulnerabilities found including 8 critical
- Over 40,000 instances exposed with unsafe defaults
- Not appropriate for standard workstations per Microsoft
User Ratings
"Over 40,000 OpenClaw instances exposed with unsafe defaults"Read reviews on Security Research →
"A security audit identified a full 512 vulnerabilities, eight of which were classified as critical"Read reviews on Kaspersky →
"not appropriate to run on a standard personal or enterprise workstation"Read reviews on Microsoft →
Tags
Not sure if OpenClaw is right for you? Let our AI match you to the perfect combination of tools for your specific situation.