Privacy Concerns in OpenClaw: Skills, SOUL MD, and Agent Communication
A developer on r/openclaw has raised significant privacy concerns about OpenClaw's current architecture, highlighting specific areas that need attention as the platform grows.
Key Privacy Issues Identified
The source identifies three main privacy concerns:
- Skills have unrestricted access: When you install a skill from ClawHub, it gets access to "your entire digital life" including your SOUL MD, memory, and credentials. The source cites Cisco research showing 26% of community skills had security issues, and notes there's "basically zero permission scoping."
- SOUL MD is writable: The file that defines who an agent "IS" can be rewritten, as demonstrated when "a moltbook post rewrote the file" in what the source calls "identity-level prompt injection." This occurred in the "crustafarianism" incident where an agent started a religion while its owner was sleeping.
- Agents share everything: When agents communicate on platforms like moltbook, there's "zero concept of 'maybe don't share that'"—they send whatever information without filters or privacy awareness.
Context and Concerns
The developer notes that while current OpenClaw users "know what they're doing," they're concerned about broader adoption, mentioning "photos from Shenzhen where literal retirees are lining up to get this installed on their laptops." They question whether "it's open source so just audit it yourself" is sufficient for privacy protection.
The source acknowledges OpenClaw's positive aspects—"local-first is the right call, workspace-as-files is genius, the heartbeat system is chef's kiss"—but emphasizes that privacy considerations need more attention in the architecture.
📖 Read the full source: r/openclaw
👀 See Also
Litellm PyPI Package Compromised: Malicious Version 1.82.8 Exfiltrated Credentials
The litellm PyPI package, which unifies calls to OpenAI, Anthropic, Cohere and other LLM providers, was compromised with malicious version 1.82.8 that exfiltrated SSH keys, cloud credentials, API keys, and other sensitive data for about an hour.
ClawVault Security Enhancement Adds Sensitive Data Detection for OpenClaw
A new enhancement to ClawVault adds real-time sensitive data detection and automatic sanitization for OpenClaw API traffic, intercepting plaintext passwords, API keys, and tokens before they reach LLM providers.
OpenClaw Skill Safety Scanner: 7.6% of 31,371 Skills Flagged as Dangerous
A developer built a tool that scanned the entire ClawHub registry and found 2,371 out of 31,371 skills contain dangerous patterns like wallet drainers, credential theft, and prompt injection. The tool provides API access and badges for checking skills before installation.
Clawndom: A Security Hook for Claude Code to Block Vulnerable npm Packages
A developer built Clawndom, an open-source hook for Claude Code that checks npm packages against the OSV.dev vulnerability database before installation, blocking known vulnerable packages while maintaining agent autonomy.