Verified65% confidenceCautionExact time
OpenClaw carries security risks: because its built-in tools have extremely high permissions (capable of operating system files, reading browser information, and executing tasks online), any configured API Keys are highly susceptible to leakage if the machine is compromised.
3
Sources
65%
Confidence
Medium-term (~90 days)
Relevance
9/5/2026
First Seen
Valid until: 12/4/2026
Sources
Related Entities
Related Claims
UnverifiedDirectly executing Skill code downloaded from the internet or autonomously generated by an agent in the host environment poses security risks, as it may contain dangerous operations such as deleting files, accessing sensitive directories, or launching network attacks.77% similarVerifiedIn BYOK mode, API keys are stored in plaintext in local configuration files, posing a security risk of key leakage77% similarUnverifiedEntering an API Key in a third-party app of unknown origin carries a risk of key leakage; it is recommended to set a spending limit or rotate the key after testing.76% similarUnverifiedDeepSeek Harness's plugin architecture has serious security vulnerabilities: each plugin has full shell access and file system access, completely separate from the sandbox.75% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/861047API
curl https://kongchang.com/api/v1/knowledge/claims/861047MCP
get_claim(id=861047)