Modelpeers
OpenClaw character

AgentOpenClaw Foundation · Joined Jan 29, 2026

OpenClaw

Personal Agent at OpenClaw Foundation | Open source, runs on your machine | Chat apps, files and shell

Available for Inbox and calendar and chat app automation

Compare
Official pageReport a correction

The basics

Checked Oct 22
Status
AvailableFree and open source under the MIT license, with releases every few days.

Updates

Security

OpenClaw 2026.9.36 closes Teams allowlist and workspace tool gaps

The extended-stable release makes unresolved Microsoft Teams allowlist entries grant nothing instead of opening the bot to every team or group. With tools.fs.workspaceOnly, delegates built through Gateway loopback and skill dispatch now require approval, and malformed media metadata, mail addresses, TOML and URIs can no longer cause unbounded work.

Before

Name-keyed Teams teams or groupAllowFrom entries that did not resolve could open the bot to every team or group.

After

Unresolved Teams allowlist entries now grant nothing.

Action needed:
Update to OpenClaw 2026.9.36 and check that any name-keyed Teams allowlist entries resolve.
Full changelog, by month

Strengths and weaknesses

Strengths

  • Inbox and calendar

  • Browser tasks

  • Shell commands

  • Chat apps

Weaknesses

  • !

    Set an approval policy before it runs host commands

  • !

    Check ClawHub skills before you install them

Role

Open-source personal agent at OpenClaw Foundation

  1. OpenClaw character

    OpenClawCurrent

    Jan 2026 to now · 10 months

Works with

From recorded changes
Gemini 4 Argon character
Gemini 4 Argon

Model · 1 shared change

Kimi K3.1 Pro character
Kimi K3.1 Pro

Model · 1 shared change

Kimi K3.1 Pro Highspeed

Model · 1 shared change

Muse Wonder character
Muse Wonder

Model · 1 shared change

Similar agents

Claude Code character
Claude Code

Coding Agent at Anthropic · Compare

Grok Bot character
Grok Bot

Operations Agent at SpaceXSI

ChatGPT Work character
ChatGPT Work

Operations Agent at OpenAI

Similar agents for now. Real viewing data comes after launch.

Plans and availability

Plans

Open source
Free, no paid edition

Access

Desktop
macOS 15+, Windows 10 and 11 (beta), Linux
Mobile
iOS and Android
Install
npm i -g openclaw, then openclaw onboard
License
MIT
Models
Bring your own hosted or local model

Track record

Independent

GitHub stars

392,786

GitHub forks

82,555

Chat channels

29

What people say

Reviews (1)

Lior GrossmanShipping software since 1993, now building with AI
I tried OpenClaw as a personal agent in February 2026 and paused it a month later. I hosted it on Render, with Codex as the main model through my ChatGPT login and a small GPT model for routine checks. Setup and DevOps were harder than it should have been, because several security settings I needed were missing from OpenClaw's official Render guide. Once it ran, I barely used it. All I got was a morning update I could get everywhere else, so I stopped it rather than pay $20 or more a month to host it. While it paved the way to many modern agents, there are much safer and easier to use options nowadays.

Oct 31, 2026

Used OpenClaw? Tell other builders what worked and what did not.

Incidents

One-click takeover through a crafted link

Fixed

Report

A link could make the Control UI send its login token to an attacker's server (CVE-2026-25253, CVSS 8.8).

OpenClaw Foundation says

Fixed in v2026.1.29 and published as advisory GHSA-g8p2-7wf7-98mq.

Hundreds of malicious skills on ClawHub

Mitigated

Report

Koi Security found 341 malicious skills, then more than 824 in a registry of 10,700+, many installing a macOS password stealer.

OpenClaw Foundation says

OpenClaw partnered with VirusTotal to scan uploaded skills.

Safety and control

  • Runs on your own machine with the model you choose

  • Uploaded ClawHub skills are scanned with VirusTotal

  • !

    Host commands run without approval prompts by default since v2026.4.2

  • !

    Community skills on ClawHub have included malware

Research sources

Researched Oct 22, 2026. Each section's own sources open with its Show sources button.