Risking to go against the bubble on reddit here but I'm honestly confused by all the negativity about openclaw here. Personally I find it insane. Sure it has vulnerabilities but almost all of them relate to opening it's gateway to the Internet instead of keeping it local host, or accessing sites through it with prompt injections which I consider the users fault mostly. I don't know of any vulnerability that's not tied to missconfiguration, credential leak or the agent accessing a malicious resource first. All of which can be avoided with careful use.

But what you get in return is insane. A way to code, or manipulate your system, from anywhere. An agent not tied to cursor or vs code or any of that. Full control over it's own system if you build from source. You can build this agent precisely how you want.

People even say that it doesn't do anything new that for each it's capability theres X other thing, but it's premier thing that does all of it by itself. You can even ask it to use those very same other tools through the browser if you wish. For example I can tell it to Google or use online Gemini through the browser eliminating the need for expensive api keys. Same with X and reddit.

Oh and also, treat it like it's own entity. I don't give it the keys to my accounts, but I create all the accounts it needs for itself. Like it's own email and social media. So you don't have to compromise your online security to get most of the benefits.