Clawdbot: Risks and Alternatives

Clawdbot is a new AI assistant that is rapidly gaining traction, but it raises significant security concerns. Despite the enthusiastic community reception, experts warn that running Clawdbot on personal computers could expose systems to hacking and data theft risks. This is a clear example of how fast-growing popularity can outpace security standard development. Thus, caution is advised.
While Clawdbot showcases new artificial intelligence capabilities, its use carries serious risks.

What is Clawdbot?

• Clawdbot is an open-source AI project that emerged in January 2026.
• It is marketed as an “agent-based AI assistant” capable of performing tasks locally on the user's computer.
• The interface operates through popular platforms such as Discord, WhatsApp, and other messaging services.
• The project became a sensation, receiving over 9,000 stars on GitHub within a day, and later exceeding 43,000.

Why did it become popular?

• It has been backed by notable tech leaders, including Andrii Karpaty, former Tesla AI lead.
• The developer community is actively testing Clawdbot since it offers a straightforward way to integrate AI into daily tasks.
• Local execution creates an illusion of greater privacy and control over data.

Security Issues

Despite the hype, Clawdbot has serious shortcomings:

• Vulnerability to remote hacking: researchers found that unsecured ports made thousands of servers accessible to outsiders, leading to API key theft incidents.
• Privacy risks: Clawdbot may store the entire interaction history, which poses a danger of confidential information leaks.
• Demo-level protection: experts emphasize that the project focuses more on rapid popularity growth than fundamental security.

Should you run Clawdbot?

• For enthusiasts: it is an intriguing experiment showcasing the potential of agent-based AI assistants.
• For everyday users: running Clawdbot on a primary computer is risky. Experts recommend avoiding its use if you value privacy and system stability.
• Alternative: it might be better to wait for official security updates or use verified AI assistants with commercial support.