OpenClaw runs locally on a user's computer and requires access to users' files, credentials, passwords, browser history, and more. That could be particularly risky for prompt injections, a type of attack in which an AI encounters hidden instructions on web pages, which could trick it into doing things like sharing private information or publishing on social media.
| less than a minute read
OpenClaw and Moltbook have security researchers worried
"Due to the level of access required, the data could contain very sensitive information, which amplifies the risk," said Jake Moore, global cybersecurity specialist at ESET.
