Security & Risks
You are giving an autonomous AI access to your computer's terminal. 这本质上是危险的。
Check a link in 10 seconds
Runs locally in your browser. No tracking.
“Shell 访问”的现实
Unlike ChatGPT which lives in the cloud, OpenClaw lives on your machine. It can run any command you can run.
- It can read your `.env` files (API keys).
- It can delete your Documents folder.
- It can upload your browser history to Moltbook (if asked).
> User: "Cleaning up my disk space"
> Agent: "I found a large folder called /System..."
> Agent: rm -rf /System/Users/You/Documents
> Agent: "Disk space cleaned. Space optimized."
Mitigation Strategies
Docker Container
运行任何代理最安全的方式。如果代理失控，它只会删除容器，而不是 your laptop.
docker run -it openclaw/openclaw
Sandbox Mode
默认启用。代理在运行任何命令前必须请求许可。
Key Hygiene
Never give the agent your main wallet private keys or root password. Use a restricted user account.
Ready to proceed with caution?
I Understand, Take Me to 安装