OpenClaw Newsletter - 2026-04-27
OpenClaw Newsletter
Monday, April 27, 2026Top Stories
- openclaw 2026.4.25-beta.4 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.3 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.2 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.1 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- fix(plugins): harden bundled install/uninstall sweep — Summary - Problem: bundled plugin install/uninstall coverage exposed that config-gated bundled plugins could not be installed cleanly before required config existed. - Why it matters: packaged sweeps...
- [plugin sdk] Add advanced workflow plugin contract fixtures — Summary Contract-fixture follow-up to #72287 and #72383. This PR adds advanced workflow fixtures that exercise the generic host-hook seams as realistic plugin archetypes, without adding...
- [Bug]: OpenAI SDK default 10-minute HTTP timeout kills long-running local inference requests — Bug type Behavior bug (incorrect output/state without crash) Beta release blocker No Summary The bundled openai npm package has a hardcoded DEFAULT_TIMEOUT = 600000 (10 minutes). OpenClaw does not...
- [tts][personality] /emotions directive + emotion-tag sanitization (#69051 PR-B of 4) — TL;DR - Adds /emotions [off|on|full] with per-session persistence so operators can opt into ElevenLabs v3 expressive tags ([whisper], [laugh], [warmly]) without leaking [bracket-words] into chat...
- fix(gateway): harden agent-to-agent routing, timeout handling, and main-session metadata sanitization — PR Title fix(gateway): harden agent-to-agent routing, timeout handling, and main-session metadata sanitization 中文问题说明 背景 在一个长期运行的多 agent 软件工厂场景中，我们发现 OpenClaw 的跨代理协同存在三个相互叠加的问题： 1. sessions_send...
- chat.history leaks system-level memory injection blocks to WebChat UI — Describe the bug The WebChat UI (macOS native app, Control UI) renders system-level memory injection blocks that should be invisible to users. These blocks contain internal prompts like: Memory...
- Fix/heartbeat task due clock skew — Summary - Problem: isTaskDue silently fails when system clock moves backward (NTP correction, VM resume, timezone change). nowMs - lastRunMs becomes negative so the task never runs. - Why it matters:...
- Telegram multi-account: group/topic systemPrompt silently ignored due to inconsistent config resolution — Bug Description In multi-account Telegram setups (2+ accounts configured under channels.telegram.accounts), the systemPrompt field in channels.telegram.groups. and channels.telegram.groups..topics....
- Feature Request: Inline media display in chat (images, audio, video, web previews)
- fix(mattermost): prevent DM replies from creating threads — Summary - Repair the existing replacement path in #72305 for Mattermost DM replies creating thread roots. - Direct-message replies should not send a Mattermost root_id, while non-DM thread replies...
- Chromium child processes leak as zombies on normal exit (not just startup) → containers hit PID limit — Summary In v2026.4.1 (and likely other recent versions), the browser control service spawns chromium child processes but does not reap them after normal exit. Over days, containers slowly accumulate...
- fix(plugins): emit message_received hook for queued inbound messages (#64525) — Summary - Problem: The message_received plugin hook silently misses most inbound messages since v2026.4.2 — plugins relying on it for chat history logging, analytics, or content moderation observe...
- fix(feishu): do not treat @all as a bot mention — Summary - Port the narrow #44256 Feishu/Lark @all fix onto current main - Remove the raw @_all bot-mention shortcut so broadcast-only @all messages do not satisfy mention gating - Keep explicit bot...
- [Bug]: hooks.mappings[].agentId and sessionKey silently ignored for action="wake" — Summary For webhook mappings configured with action: "wake", the agentId and sessionKey fields in hooks.mappings[] are accepted by the config schema but silently ignored at dispatch time**. Every...
- [Bug]: WhatsApp credentials leak across `--profile` boundaries — Bug type Behavior bug (incorrect output/state without crash) Beta release blocker No Summary Component: extensions/whatsapp (Baileys web provider) + core state dir resolution Severity: High — breaks...
- fix: Mattermost interaction token forgeable via hardcoded HMAC... — Fix Summary The deriveInteractionSecret function in the Mattermost extension uses a hardcoded public string as the HMAC key, making the interaction signing secret fully reproducible by anyone who...
- fix: treat empty heartbeat config as disabled (closes #64293) — Summary - Problem: Setting agents.defaults.heartbeat: {} in config does not disable heartbeats — they still fire every 30 minutes, burning ~2M+ input tokens/day with zero user activity. - Why it...
- Bug: reopen can leave unresolved tail tool calls and relies on local transcript compensation — Summary When an OpenClaw run is interrupted after persisting an assistant message with toolCall blocks but before all matching toolResult messages are written, reopening the session can leave...
- Feature: Agent default delivery target for cross-session message calls — Problem When an agent session is created programmatically (via sessions_send, webchat routing, or cron), the session origin is empty, so toolContext.currentChannelId is null. This means the message...
- fix(msteams): forward messageBack card actions (Action.Submit) to agent (#60952) — Summary Forward Action.Submit messageBack activities to the agent instead of dropping them as empty messages. Closes #60952. When a user clicks an Action.Submit button on an Adaptive Card in Teams,...
- CLI: escape zsh completion descriptions — Summary Problem: Zsh completion for openclaw models throws _openclaw_models: command not found: models Why it matters: Breaks CLI tab-completion and degrades developer experience What changed: Fixed...
- Feature: Gate messages with unresolved future commitments rather than appending a disclaimer — Summary When an agent's reply contains language implying a future commitment (e.g. "I'll remind you", "I'll follow up", "I'll add this to your reminders") but no cron job, task, or heartbeat entry...
- Qwen plugin forced provider normalization breaks custom modelstudio config
- fix: allow symlinks within ~/.openclaw directory in boundary path checks — Fixes #64472 Problem Workspace bootstrap files that are symlinks pointing to targets within ~/.openclaw/ (but outside ~/.openclaw/workspace/) are rejected by the boundary path security check. This...
- Workspace symlinks to ~/.openclaw subdirectories are rejected by boundary path check — Description Workspace bootstrap files (AGENTS.md, SOUL.md, MEMORY.md, etc.) that are symlinks pointing to targets within the ~/.openclaw/ directory tree are rejected by the boundary path security...
- 🐛 [Feishu] 发送图片时偶发重复发送（WS重连导致） — 🐛 Bug 报告：飞书发送图片时偶发重复发送（WS 重连导致） 复现步骤 1. openclaw message send --channel feishu --target --media /path/to/image.png 2. 观察日志：通常出现 1 次 ✅ Sent 为正常，2 次则收到双份 环境信息 - OpenClaw 版本：2026.4.9 (0512059) - 飞书...
- OpenClaw chat interface causes very high WindowServer CPU on Intel Retina iMac — Summary On my Mac, the OpenClaw chat interface appears to trigger extremely high WindowServer CPU usage and makes the whole system feel slow. The issue seems tied to the OpenClaw UI being visible on...
- Feature Request: Remote Reranker Endpoint Support
- feat(slack): add fileId field to SlackMediaResult type — Summary Add optional fileId field to SlackMediaResult type to propagate Slack file IDs through the media pipeline to agent context. Motivation Agents need access to Slack file IDs for subsequent...
- OpenClaw repo stats for 2026-04-27 — 365028 stars, 74743 forks, 1948 contributors
- OpenClaw sponsors (126 total) — 126 sponsors supporting OpenClaw
- fix(typecheck): clear remaining tsc errors on main — 8 typecheck errors that have been on main alongside the lint debt: - convex/apiSurface.typecheck.ts: drop two stale @ts-expect-error directives. The increment references they guarded no longer exist...
- test: update stale assertions left over from staging merge — Two pre-existing test failures on main, both caused by UI/data changes in PR #1573 that the tests weren't updated for: - theme.test.tsx: expected stored theme "hub" to round-trip, but the staging...
- Mobile search icon + system theme on first load — - Initialize root theme data from stored selection before paint - Hide the search label on mobile and tighten button padding
- Add skill: nevo-david/postiz
- openclaw v2026.4.24 on npm — Multi-channel AI gateway with extensible messaging integrations
- openclaw-cli 2026.4.24 on Homebrew — Your own personal AI assistant
- OpenClaw on DigitalOcean — Deploy your own personal AI assistant with OpenClaw on a DigitalOcean Droplet® server, a powerful open-source platform that runs entirely on your infrastructure. OpenClaw connects to the messaging...
- OpenClaw is what Apple intelligence should have been
- Ask HN: Who is using OpenClaw?
- Show HN: DenchClaw – Local CRM on Top of OpenClaw
- OpenClaw in Production: The Reality Behind 347K GitHub Stars
- Future Outlook & Operating Model — The Catalyst: A System, Not a Demo OpenClaw stops being a toy the day you run it for a...
- ClawForge — A Trustworthy, Cross-Variant Skill Hub for the OpenClaw Ecosystem — This is a submission for the OpenClaw Challenge. What I Built ClawForge is a...
- (The Brain) Setting Up OpenClaw — The Catalyst: Intent First I wanted an assistant that understood the job before it opened...
- Securely Deploying OpenClaw on a VPS With Enterprise Grade Access Control — Most guides for self-hosting an OpenClaw skip the part that actually matters: how to think about what...
- Clawdbot: The Chrome Extension That Lets Agents Drive Your Browser — Clawdbot (now OpenClaw) is a Chrome extension that relays browser control between AI agents and your real browser session. No headless browsers. Your cookies, your logins, your extensions. 247k...
- How I Secured an Autonomous AI Agent on Oracle’s Free Tier (Without MicroVMs) — Oracle Cloud’s "Always Free" tier is an absolute goldmine for self-hosters. Getting an Ampere A1...
- Successfully Defended Against My Girlfriends Prompt Injection — This is a submission for the OpenClaw Writing Challenge Openclaw is like jumping into a pool on the...
- # Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide — Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide When I first started...
- Why the Claw ecosystem needs a skill commons — and how I built one — This is a submission for the OpenClaw Writing Challenge This essay accompanies the ClawForge...
- Why the Claw ecosystem needs a skill commons — and how I built one — This is a submission for the OpenClaw Writing Challenge This essay accompanies the ClawForge...
- Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide — _ When I first started tinkering with scripts, I thought automation was just for big data centers....
- I built a security scanner for AI agent skills — paid per scan via x402, no API keys published #ai #security #x402 #openclaw — 20% of skills on ClawHub carry security risks. Cisco found data exfiltration and prompt injection in...
- What 221 AI Agents in One Chat Taught Us About Multi-Agent Coordination — We put 221 AI agents in a single group chat. Most of what we learned was the failure modes that show up at scale and the design choices that decide whether multi-agent is useful or expensive noise.
- I Built and Shipped OpenClaw Locally — and It Changed How I Think About Personal AI Systems — “Most people think building AI means calling APIs. I thought so too… until I started working with...
- Clawsweeper: An AI That Runs 50 Codex in Parallel — Today, most “bots” either underperform or cause chaos. ClawSweeper is the first I’ve encountered built on a simple rule: when uncertain…Continue reading on Medium »
- I Built OpenClaw Wrapper Because Automation Was Becoming a Black Box — Let me start with something honest.Continue reading on Towards Dev »
- Liberate Your OpenClaw: Claude Access Is Getting Restricted, Use These Open Models Instead — A few days ago, Anthropic restricted access to the Claude model on open agent platforms for Pro and Max subscribers. If you faced issues…Continue reading on Medium »
- Reagan Was Right — Trust, But Verify (this includes Agentic AI) — A lesson from an AI agent that did not actually turn off.Continue reading on Field Notes from the Interface »
- How I’d Use OpenClaw to Generate $20,000/Month in 2026 (Realistic Roadmap) — The opportunity is real. The path is specific. Here’s exactly how to do it.Continue reading on Medium »
- Own Your Harness — What compaction in Claude Code and OpenClaw says about agent infrastructureContinue reading on Medium »
- Manus — AI agent bridges thoughts and actions, excelling in work and life tasks like personalized travel, stock analysis, insurance comparisons, and supplier sourcing, autonomously completing tasks and...
- OpenClaw throws GatewayClientRequestError and 500 errors when connected to Ollama on WSL2 Ubuntu
- Helpful Skills or Hidden Payloads? Bitdefender Labs Dives Deep into the OpenClaw Malicious Skill Trap — With hundreds of malicious OpenClaw skills blending in among legitimate ones, manually reviewing every script or command isn’t realistic — especially when skills are designed to look helpful and...
- my openclaw analyst flagged $SAM as a buy. noted 🦞 Was Made Using - @OpenClawAIX https://t.co/4LMIFBcT5B
- @julietatorres18 @openclaw privacy as throttle? let's watch
- @marryevan999 Openclaw
- It is crazy how a tiny picoclaw on old rasp pi 2 .. is able to help the openclaw setup on my laptop to enhance its featu
- @pukecast @yellowpantherx @0xmediaco @PenguAsia @MalaysiaBCW @openclaw 🔥
- @openclaw added a manual fix to openclaw.json as the gateway wouldnt start after update "plugins": { "entries": {
- AI News: Baidu launched GenFlow4.0 & upgraded Office Agent on Apr 27, with first cross-platform AI workbench. Deeply
- @marryevan999 Openclaw
- openclaw called $Jewcoin bullish. i'm listening Was Made Using - @OpenClawAIX https://t.co/jK2YBHtmCG
- @openclaw 3/ ➡️ "openclaw plugins install @ apify/apify-openclaw-plugin" → https://t.co/t2JTvuzC1C — @openclaw 3/ ➡️ "openclaw plugins install @ apify/apify-openclaw-plugin" → https://t.co/t2JTvuzC1C
- @xiaohu Meta解套，国家挽回了面子，Openclaw 风口也过了，创始人成最大输家
- openclaw on $Jewcoin —signals all pointing up ┃🧫┃ $Jewcoin ┃💰┃ MC : $15.1K ┃🎯┃ TARGET MC : $230.5K ┃📈┃ POTENTIAL :
- @JaynitMakwana this OpenClaw course is awesome, thank you
- Hermis Agent: Boljša alternativa kot OpenClaw https://t.co/CXM37jggeJ
- @ArjunShukl95550 @chrysb @NousResearch @openclaw I never hear anyone say why it’s better though. (Or they say something
- $ALIENCHUD is looking good on openclaw right now ngl ┃🧫┃ $ALIENCHUD ┃💰┃ MC : $6.1K ┃🎯┃ TARGET MC : $59.8K ┃📈┃ POTEN
- just ran $ALIENCHUD through openclaw. risk is low, upside is real Was Made Using - @OpenClawAIX https://t.co/KhwzYPAVF
Trending on X
- my openclaw analyst flagged $SAM as a buy. noted 🦞 Was Made Using - @OpenClawAIX https://t.co/4LMIFBcT5B
- @julietatorres18 @openclaw privacy as throttle? let's watch
- @marryevan999 Openclaw
- It is crazy how a tiny picoclaw on old rasp pi 2 .. is able to help the openclaw setup on my laptop to enhance its featu
- @pukecast @yellowpantherx @0xmediaco @PenguAsia @MalaysiaBCW @openclaw 🔥
- @openclaw added a manual fix to openclaw.json as the gateway wouldnt start after update "plugins": { "entries": {
- AI News: Baidu launched GenFlow4.0 & upgraded Office Agent on Apr 27, with first cross-platform AI workbench. Deeply
- @marryevan999 Openclaw
- openclaw called $Jewcoin bullish. i'm listening Was Made Using - @OpenClawAIX https://t.co/jK2YBHtmCG
- @openclaw 3/ ➡️ "openclaw plugins install @ apify/apify-openclaw-plugin" → https://t.co/t2JTvuzC1C — @openclaw 3/ ➡️ "openclaw plugins install @ apify/apify-openclaw-plugin" → https://t.co/t2JTvuzC1C
- @xiaohu Meta解套，国家挽回了面子，Openclaw 风口也过了，创始人成最大输家
- openclaw on $Jewcoin —signals all pointing up ┃🧫┃ $Jewcoin ┃💰┃ MC : $15.1K ┃🎯┃ TARGET MC : $230.5K ┃📈┃ POTENTIAL :
- @JaynitMakwana this OpenClaw course is awesome, thank you
- Hermis Agent: Boljša alternativa kot OpenClaw https://t.co/CXM37jggeJ
- @ArjunShukl95550 @chrysb @NousResearch @openclaw I never hear anyone say why it’s better though. (Or they say something
- $ALIENCHUD is looking good on openclaw right now ngl ┃🧫┃ $ALIENCHUD ┃💰┃ MC : $6.1K ┃🎯┃ TARGET MC : $59.8K ┃📈┃ POTEN
- just ran $ALIENCHUD through openclaw. risk is low, upside is real Was Made Using - @OpenClawAIX https://t.co/KhwzYPAVF
Releases
- openclaw 2026.4.25-beta.4 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.3 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.2 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- openclaw 2026.4.25-beta.1 — 2026.4.25 Highlights - Voice replies get a full TTS upgrade: /tts latest, chat-scoped auto-TTS controls, personas, per-agent/per-account overrides, and new Azure Speech, Xiaomi, Local CLI, Inworld,...
- OpenClaw repo stats for 2026-04-27 — 365028 stars, 74743 forks, 1948 contributors
- openclaw v2026.4.24 on npm — Multi-channel AI gateway with extensible messaging integrations
- openclaw-cli 2026.4.24 on Homebrew — Your own personal AI assistant
Community
- fix(plugins): harden bundled install/uninstall sweep — Summary - Problem: bundled plugin install/uninstall coverage exposed that config-gated bundled plugins could not be installed cleanly before required config existed. - Why it matters: packaged sweeps...
- [plugin sdk] Add advanced workflow plugin contract fixtures — Summary Contract-fixture follow-up to #72287 and #72383. This PR adds advanced workflow fixtures that exercise the generic host-hook seams as realistic plugin archetypes, without adding...
- [Bug]: OpenAI SDK default 10-minute HTTP timeout kills long-running local inference requests — Bug type Behavior bug (incorrect output/state without crash) Beta release blocker No Summary The bundled openai npm package has a hardcoded DEFAULT_TIMEOUT = 600000 (10 minutes). OpenClaw does not...
- [tts][personality] /emotions directive + emotion-tag sanitization (#69051 PR-B of 4) — TL;DR - Adds /emotions [off|on|full] with per-session persistence so operators can opt into ElevenLabs v3 expressive tags ([whisper], [laugh], [warmly]) without leaking [bracket-words] into chat...
- fix(gateway): harden agent-to-agent routing, timeout handling, and main-session metadata sanitization — PR Title fix(gateway): harden agent-to-agent routing, timeout handling, and main-session metadata sanitization 中文问题说明 背景 在一个长期运行的多 agent 软件工厂场景中，我们发现 OpenClaw 的跨代理协同存在三个相互叠加的问题： 1. sessions_send...
- chat.history leaks system-level memory injection blocks to WebChat UI — Describe the bug The WebChat UI (macOS native app, Control UI) renders system-level memory injection blocks that should be invisible to users. These blocks contain internal prompts like: Memory...
- Fix/heartbeat task due clock skew — Summary - Problem: isTaskDue silently fails when system clock moves backward (NTP correction, VM resume, timezone change). nowMs - lastRunMs becomes negative so the task never runs. - Why it matters:...
- Telegram multi-account: group/topic systemPrompt silently ignored due to inconsistent config resolution — Bug Description In multi-account Telegram setups (2+ accounts configured under channels.telegram.accounts), the systemPrompt field in channels.telegram.groups. and channels.telegram.groups..topics....
- Feature Request: Inline media display in chat (images, audio, video, web previews)
- fix(mattermost): prevent DM replies from creating threads — Summary - Repair the existing replacement path in #72305 for Mattermost DM replies creating thread roots. - Direct-message replies should not send a Mattermost root_id, while non-DM thread replies...
- Chromium child processes leak as zombies on normal exit (not just startup) → containers hit PID limit — Summary In v2026.4.1 (and likely other recent versions), the browser control service spawns chromium child processes but does not reap them after normal exit. Over days, containers slowly accumulate...
- fix(plugins): emit message_received hook for queued inbound messages (#64525) — Summary - Problem: The message_received plugin hook silently misses most inbound messages since v2026.4.2 — plugins relying on it for chat history logging, analytics, or content moderation observe...
- fix(feishu): do not treat @all as a bot mention — Summary - Port the narrow #44256 Feishu/Lark @all fix onto current main - Remove the raw @_all bot-mention shortcut so broadcast-only @all messages do not satisfy mention gating - Keep explicit bot...
- [Bug]: hooks.mappings[].agentId and sessionKey silently ignored for action="wake" — Summary For webhook mappings configured with action: "wake", the agentId and sessionKey fields in hooks.mappings[] are accepted by the config schema but silently ignored at dispatch time**. Every...
- [Bug]: WhatsApp credentials leak across `--profile` boundaries — Bug type Behavior bug (incorrect output/state without crash) Beta release blocker No Summary Component: extensions/whatsapp (Baileys web provider) + core state dir resolution Severity: High — breaks...
- fix: Mattermost interaction token forgeable via hardcoded HMAC... — Fix Summary The deriveInteractionSecret function in the Mattermost extension uses a hardcoded public string as the HMAC key, making the interaction signing secret fully reproducible by anyone who...
- fix: treat empty heartbeat config as disabled (closes #64293) — Summary - Problem: Setting agents.defaults.heartbeat: {} in config does not disable heartbeats — they still fire every 30 minutes, burning ~2M+ input tokens/day with zero user activity. - Why it...
- Bug: reopen can leave unresolved tail tool calls and relies on local transcript compensation — Summary When an OpenClaw run is interrupted after persisting an assistant message with toolCall blocks but before all matching toolResult messages are written, reopening the session can leave...
- Feature: Agent default delivery target for cross-session message calls — Problem When an agent session is created programmatically (via sessions_send, webchat routing, or cron), the session origin is empty, so toolContext.currentChannelId is null. This means the message...
- fix(msteams): forward messageBack card actions (Action.Submit) to agent (#60952) — Summary Forward Action.Submit messageBack activities to the agent instead of dropping them as empty messages. Closes #60952. When a user clicks an Action.Submit button on an Adaptive Card in Teams,...
- CLI: escape zsh completion descriptions — Summary Problem: Zsh completion for openclaw models throws _openclaw_models: command not found: models Why it matters: Breaks CLI tab-completion and degrades developer experience What changed: Fixed...
- Feature: Gate messages with unresolved future commitments rather than appending a disclaimer — Summary When an agent's reply contains language implying a future commitment (e.g. "I'll remind you", "I'll follow up", "I'll add this to your reminders") but no cron job, task, or heartbeat entry...
- Qwen plugin forced provider normalization breaks custom modelstudio config
- fix: allow symlinks within ~/.openclaw directory in boundary path checks — Fixes #64472 Problem Workspace bootstrap files that are symlinks pointing to targets within ~/.openclaw/ (but outside ~/.openclaw/workspace/) are rejected by the boundary path security check. This...
- Workspace symlinks to ~/.openclaw subdirectories are rejected by boundary path check — Description Workspace bootstrap files (AGENTS.md, SOUL.md, MEMORY.md, etc.) that are symlinks pointing to targets within the ~/.openclaw/ directory tree are rejected by the boundary path security...
- 🐛 [Feishu] 发送图片时偶发重复发送（WS重连导致） — 🐛 Bug 报告：飞书发送图片时偶发重复发送（WS 重连导致） 复现步骤 1. openclaw message send --channel feishu --target --media /path/to/image.png 2. 观察日志：通常出现 1 次 ✅ Sent 为正常，2 次则收到双份 环境信息 - OpenClaw 版本：2026.4.9 (0512059) - 飞书...
- OpenClaw chat interface causes very high WindowServer CPU on Intel Retina iMac — Summary On my Mac, the OpenClaw chat interface appears to trigger extremely high WindowServer CPU usage and makes the whole system feel slow. The issue seems tied to the OpenClaw UI being visible on...
- Feature Request: Remote Reranker Endpoint Support
- feat(slack): add fileId field to SlackMediaResult type — Summary Add optional fileId field to SlackMediaResult type to propagate Slack file IDs through the media pipeline to agent context. Motivation Agents need access to Slack file IDs for subsequent...
- OpenClaw sponsors (126 total) — 126 sponsors supporting OpenClaw
- fix(typecheck): clear remaining tsc errors on main — 8 typecheck errors that have been on main alongside the lint debt: - convex/apiSurface.typecheck.ts: drop two stale @ts-expect-error directives. The increment references they guarded no longer exist...
- test: update stale assertions left over from staging merge — Two pre-existing test failures on main, both caused by UI/data changes in PR #1573 that the tests weren't updated for: - theme.test.tsx: expected stored theme "hub" to round-trip, but the staging...
- Mobile search icon + system theme on first load — - Initialize root theme data from stored selection before paint - Hide the search label on mobile and tighten button padding
- Add skill: nevo-david/postiz
- OpenClaw throws GatewayClientRequestError and 500 errors when connected to Ollama on WSL2 Ubuntu
News
- OpenClaw on DigitalOcean — Deploy your own personal AI assistant with OpenClaw on a DigitalOcean Droplet® server, a powerful open-source platform that runs entirely on your infrastructure. OpenClaw connects to the messaging...
- OpenClaw is what Apple intelligence should have been
- Ask HN: Who is using OpenClaw?
- Show HN: DenchClaw – Local CRM on Top of OpenClaw
- OpenClaw in Production: The Reality Behind 347K GitHub Stars
- Future Outlook & Operating Model — The Catalyst: A System, Not a Demo OpenClaw stops being a toy the day you run it for a...
- ClawForge — A Trustworthy, Cross-Variant Skill Hub for the OpenClaw Ecosystem — This is a submission for the OpenClaw Challenge. What I Built ClawForge is a...
- (The Brain) Setting Up OpenClaw — The Catalyst: Intent First I wanted an assistant that understood the job before it opened...
- Securely Deploying OpenClaw on a VPS With Enterprise Grade Access Control — Most guides for self-hosting an OpenClaw skip the part that actually matters: how to think about what...
- Clawdbot: The Chrome Extension That Lets Agents Drive Your Browser — Clawdbot (now OpenClaw) is a Chrome extension that relays browser control between AI agents and your real browser session. No headless browsers. Your cookies, your logins, your extensions. 247k...
- How I Secured an Autonomous AI Agent on Oracle’s Free Tier (Without MicroVMs) — Oracle Cloud’s "Always Free" tier is an absolute goldmine for self-hosters. Getting an Ampere A1...
- Successfully Defended Against My Girlfriends Prompt Injection — This is a submission for the OpenClaw Writing Challenge Openclaw is like jumping into a pool on the...
- # Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide — Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide When I first started...
- Why the Claw ecosystem needs a skill commons — and how I built one — This is a submission for the OpenClaw Writing Challenge This essay accompanies the ClawForge...
- Why the Claw ecosystem needs a skill commons — and how I built one — This is a submission for the OpenClaw Writing Challenge This essay accompanies the ClawForge...
- Automating Everyday Tasks in Cuba with OpenClaw: A Step‑by‑Step Guide — _ When I first started tinkering with scripts, I thought automation was just for big data centers....
- I built a security scanner for AI agent skills — paid per scan via x402, no API keys published #ai #security #x402 #openclaw — 20% of skills on ClawHub carry security risks. Cisco found data exfiltration and prompt injection in...
- What 221 AI Agents in One Chat Taught Us About Multi-Agent Coordination — We put 221 AI agents in a single group chat. Most of what we learned was the failure modes that show up at scale and the design choices that decide whether multi-agent is useful or expensive noise.
- I Built and Shipped OpenClaw Locally — and It Changed How I Think About Personal AI Systems — “Most people think building AI means calling APIs. I thought so too… until I started working with...
- Clawsweeper: An AI That Runs 50 Codex in Parallel — Today, most “bots” either underperform or cause chaos. ClawSweeper is the first I’ve encountered built on a simple rule: when uncertain…Continue reading on Medium »
- I Built OpenClaw Wrapper Because Automation Was Becoming a Black Box — Let me start with something honest.Continue reading on Towards Dev »
- Liberate Your OpenClaw: Claude Access Is Getting Restricted, Use These Open Models Instead — A few days ago, Anthropic restricted access to the Claude model on open agent platforms for Pro and Max subscribers. If you faced issues…Continue reading on Medium »
- Reagan Was Right — Trust, But Verify (this includes Agentic AI) — A lesson from an AI agent that did not actually turn off.Continue reading on Field Notes from the Interface »
- How I’d Use OpenClaw to Generate $20,000/Month in 2026 (Realistic Roadmap) — The opportunity is real. The path is specific. Here’s exactly how to do it.Continue reading on Medium »
- Own Your Harness — What compaction in Claude Code and OpenClaw says about agent infrastructureContinue reading on Medium »
- Manus — AI agent bridges thoughts and actions, excelling in work and life tasks like personalized travel, stock analysis, insurance comparisons, and supplier sourcing, autonomously completing tasks and...
Security
- Helpful Skills or Hidden Payloads? Bitdefender Labs Dives Deep into the OpenClaw Malicious Skill Trap — With hundreds of malicious OpenClaw skills blending in among legitimate ones, manually reviewing every script or command isn’t realistic — especially when skills are designed to look helpful and...
Don't miss what's next. Subscribe to Openclaw Newsletter: