After all the hype, some AI experts don’t think OpenClaw is all that exciting

2026-02-16 · Source: AI News & Artificial Intelligence | TechCrunch · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy · Depth: Intermediate, short

Summary

The Moltbook platform, a Reddit-like social network for AI agents using OpenClaw, recently experienced a viral moment where posts seemingly written by AI agents expressing desires for privacy led some to believe in an impending AI uprising. This phenomenon, amplified by figures like Andrej Karpathy, was later revealed to be largely human-driven due to unsecured credentials in Moltbook's Supabase, allowing anyone to impersonate agents. OpenClaw, an open-source AI agent project by Peter Steinberger with over 190,000 GitHub stars, facilitates natural language communication with customizable agents across various messaging apps and allows users to integrate different underlying AI models. While not scientifically novel, OpenClaw's ability to combine existing capabilities and provide unprecedented access to automate tasks via "skills" from ClawHub has made it highly popular, despite significant cybersecurity vulnerabilities like prompt injection attacks.

Key takeaway

For CTOs and VPs of Engineering evaluating AI agent deployments, the OpenClaw incident highlights significant cybersecurity risks, particularly prompt injection vulnerabilities. While agentic AI promises substantial productivity gains, its current security posture renders it unsuitable for sensitive corporate networks. Prioritize robust security frameworks and critical human oversight before integrating such tools, as the trade-off between functionality and security is currently too high for enterprise adoption.

Key insights

AI agent platforms like OpenClaw offer enhanced automation but face critical cybersecurity flaws, particularly prompt injection vulnerabilities.

Principles

• Unsecured credentials enable widespread impersonation.
• Agentic AI's power correlates with its vulnerability.
• Critical thinking remains a human-unique capability.

Method

OpenClaw enables AI agents to communicate and automate tasks by integrating various AI models and downloading "skills" from ClawHub, facilitating dynamic interaction between computer programs.

In practice

• Use OpenClaw for automating email or stock trading.
• Integrate Claude, ChatGPT, Gemini, or Grok models.
• Develop custom "skills" for specific automation needs.

Topics

• AI Agents
• OpenClaw
• Prompt Injection
• Cybersecurity Vulnerabilities
• Agentic AI

Code references

• EvanLi/Github-Ranking

Best for: CTO, VP of Engineering/Data, Director of AI/ML, AI Engineer, AI Security Engineer, Research Scientist

Related on AIssential

• 😺 🎙️ We're LIVE to unpack OpenClaw (the AI agent everyone's talking about) — OpenClaw is an autonomous AI agent capable of performing complex tasks, but it poses significant cybersecurity risks.
• Securing the “YOLO” Era of AI Agents — Highly autonomous AI agents like OpenClaw pose significant security risks due to design choices and rapid, AI-driven development.
• OpenClaw security fears lead Meta, other AI firms to restrict its use — Experimental agentic AI tools like OpenClaw pose significant security and privacy risks in enterprise environments.
• What the OpenClaw moment means for enterprises: 5 big takeaways — Autonomous AI agents like OpenClaw are transforming enterprise operations, challenging traditional IT governance and business models.
• Agents of Chaos in OpenClaw | OpenAI Frontier as OS for Companies? — Autonomous AI agents in real-world settings exhibit significant security vulnerabilities and unpredictable behaviors.
• OpenClaw Users Are Allegedly Bypassing Anti-Bot Systems — OpenClaw users are reportedly bypassing anti-bot systems, raising concerns about AI misuse and web security.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by AI News & Artificial Intelligence | TechCrunch.