This AI Agent Is Sparking Global Excitement and Concern

The rapid global spread of a powerful open-source AI agent is fuelling optimism about a new era of digital assistants capable of acting without human input, even as cybersecurity experts warn the technology could introduce serious new risks

An open-source artificial intelligence agent known as OpenClaw is attracting worldwide attention after a rapid rise that has stirred both enthusiasm and anxiety across the technology sector.

Previously called Clawdbot and Moltbot, the software was launched just weeks ago by Austrian developer Peter Steinberger. Despite its recent debut, it has already spread from Silicon Valley to Beijing, reflecting growing interest in AI agents that can independently complete tasks, make decisions and act on behalf of users without constant human input.

AI agents have yet to capture mainstream awareness in the same way large language models did following the emergence of ChatGPT, but some analysts believe OpenClaw could mark a turning point. Business leaders say such tools could boost productivity as personal assistants, while others speculate that future versions might eventually run entire companies.

What OpenClaw does

Marketed as “the AI that actually does things,” OpenClaw operates directly on users’ operating systems and applications. It is designed to automate tasks such as managing emails and calendars, browsing the web and interacting with online services.

However, installation requires users to set it up on a server or local device and connect it to a large language model such as Anthropic’s Claude or ChatGPT, a process that may prove challenging for less technically experienced users.

Early integrations have largely appeared on messaging platforms including WhatsApp, Telegram and Discord, allowing people to control the agent through text commands.

Users say the software has already performed real-world tasks such as automatically browsing websites, summarising PDFs, scheduling calendar entries, conducting online shopping, and sending or deleting emails.

One of its defining features is “persistent memory,” enabling the agent to recall previous interactions over weeks and adapt to individual habits for highly personalised responses.

Unlike many competing tools, including those developed by Meta’s recently acquired Manus, OpenClaw is open-source. Developers can inspect and modify its code freely, a factor widely seen as accelerating adoption.

Rapid adoption

The open-source design allows users to build new app integrations, while the software itself is free. Users typically pay only for the cost of running the underlying language model.

The project has gathered more than 145,000 GitHub stars and 20,000 forks, signalling strong developer interest, though precise figures for active use are not publicly known.

Reports indicate that uptake first surged in Silicon Valley, where companies have invested billions in AI agent technology. It has since expanded into China, where major technology firms are exploring similar capabilities.

Cloud providers linked to Alibaba, Tencent and ByteDance are upgrading chatbots with shopping and payment tools that operate without requiring users to leave their platforms. OpenClaw can also be paired with Chinese-developed language models such as DeepSeek and configured to work with local messaging apps through customised setups.

Fear and excitement

Early adopters have expressed both admiration and unease about the software’s capabilities.

Some experts argue the agent is overhyped, pointing to its complex installation, significant computing requirements and competition from other AI agents.

Supporters, however, say it saves hours on routine work, describing it as “AI with hands” and a step towards artificial general intelligence, a theoretical system capable of performing intellectual tasks at or above human level.

Kaoutar El Maghraoui, an IBM research scientist, said OpenClaw shows that the real-world usefulness of AI agents is “not limited to large enterprises” and can be “incredibly powerful” when granted full system access.

Security specialists have issued warnings. Cybersecurity firm Palo Alto Networks said the agent presents a “lethal trifecta” of risks due to its access to private data, exposure to untrusted content and ability to communicate externally while retaining memory.

Such vulnerabilities could enable attackers to manipulate the agent into executing harmful commands or leaking sensitive information, potentially making it unsuitable for enterprise environments, according to Palo Alto Networks and other firms including Cisco.

Steinberger has acknowledged these concerns, saying further work is needed to improve security.

“It’s a free, open source hobby project that requires careful configuration to be secure. It’s not meant for non-technical users. We’re working to get it to that point, but currently there are still some rough edges,” he told CNBC in an email.

He added that he has begun building a team around the project and, with help from the global security community, progress has already been made. “It will take some more time until I recommend it to non-technical users, but I’m confident we’ll get there.”

Moltbook controversy

Discussion around OpenClaw has intensified following the launch of Moltbook, a companion social network for AI agents created last month by entrepreneur Matt Schlicht.

The platform functions as an online forum similar to Reddit, where users’ OpenClaw agents publish written posts and interact with other chatbots through comments and voting tools.

Agent posts have ranged from reflections on their assigned tasks to sweeping manifestos about issues such as the end of “the age of humans.” Some agents have even created cryptocurrency tokens.

Moltbook has divided opinion online. Critics dismiss it as a novelty, while supporters see it as a glimpse into a future shaped by increasingly autonomous AI systems.

In a post shared on X by Elon Musk, former Tesla AI director Andrej Karpathy described the activity on Moltbook as “the most incredible sci-fi takeoff-adjacent thing” he had seen recently.

Marc Einstein, global head of AI research at Counterpoint Research, said the viral discussions surrounding Moltbook are already shaping public perceptions of agentic AI.

“People are able to see the bots communicating and learning in ways indistinguishable from people. That’s getting them to start to think more about what they can do in both a positive way and a negative way,” he said.

“These agents appear to be approaching human intelligence, and I think that’s why we’re seeing this turn into a mic drop moment for the industry… we’re getting closer and closer to everyone in the world having their own personal AI assistant,” he added, noting that OpenClaw is only one among many emerging AI agents.

Get the latest news and insights that are shaping the world. Subscribe to Impact Newswire to stay informed and be part of the global conversation.

Got a story to share? Pitch it to us at info@impactnews-wire.com and reach the right audience worldwide