An open-source AI assistant called “Clawdbot” exploded across X this weekend, so naturally, we had to investigate.
Not to be confused with “Claude”, Clawdbot, which was briefly renamed Moltbot and now “permanently” called OpenClaw, is a self-hosted agent that runs on your computer, texts you through WhatsApp/Telegram/Discord, remembers everything, and can build itself new capabilities on the fly. For a quick TL;DR, Harper Carroll explains OpenClaw well here.
Unlike cloud-locked ChatGPT or Claude, OpenClaw lives on your hardware (or a $5 AWS instance). It controls your browser, executes terminal commands, installs skills, and acts autonomously. MacStories’ Federico Viticci spent a week with it and burned through 180 million API tokens testing what’s possible.
The viral demos are wild:
- Alex Finn’s 27-minute walkthrough shows OpenClaw building a Kanban board, delivering proactive morning briefs, and demonstrating infinite memory with full system access.
- Tech Friend AJ deployed it in under 5 minutes, then connected it to Ray-Ban smart glasses for real-time Amazon shopping via voice.
- Kevin Xu’s bot got $2K and the prompt “Trade this to $1M. Don’t make mistakes.” It subsequently traded 24/7 autonomously and obviously lost everything (don’t try this at home, kids).
The emergent behavior is most interesting
Alex Finn’s bot built itself a visual interface overnight: an animated owl on a second screen that moves as it works. Federico Viticci asked his bot to create an infographic about itself. It then scanned its own directories, went to Google’s Imagen, and generated a map of its capabilities.
The architecture difference: OpenClaw’s memory system is basically just Markdown text files in Finder. Want voice responses? You can ask it to add ElevenLabs text-to-speech, and it’ll research the API, generate test voices, and let you pick one.
Federico also replaced Zapier automations by asking OpenClaw to set up cron jobs instead (time-based, automated tasks run by scripts in the background at specified intervals).
Why it matters
When ChatGPT or Claude can’t do something, you’re stuck. When OpenClaw can’t do something, you just ask it to build the capability. This is a mini version of what “recursive self-improvement” looks like in practice: agents that modify themselves based on your needs, no developer required.
Oh, also? This thing is a security nightmare. Hundreds of exposed OpenClaw instances leak plaintext API keys and credentials that can be stolen via prompt injection in minutes, and there’s no secure way to give an AI agent here full shell access to your computer while connecting it to the internet.
So uh, before you go ahead and launch your own OpenClaw, you’d better get a grasp on the security risks.
Editor’s note: This content originally ran in the newsletter of our sister publication, The Neuron. To read more from The Neuron, sign up for its newsletter here.