ClawdBot is out of control

Quick Overview

The ClawdBot AI assistant, which allows users to automate tasks via messaging apps like Telegram, Discord, and WhatsApp, is open-source and self-hostable, but its security relies heavily on user configuration, as evidenced by a Shodan scan revealing many instances left exposed with zero authentication, prompting security warnings from experts.

Key Points: ClawdBot is an open-source, self-hosted personal AI assistant that connects to files/terminal and interacts via messaging apps like Telegram, Discord, and WhatsApp (00:20). The creator, Peter Steinberger, uses it for tasks like managing his computer, checking emails, and even controlling his smart home devices (00:39, 02:07). The setup process involves running an installation script and onboarding via CLI, which can be complex, especially if using Discord or WhatsApp which require developer portal setup or QR codes (02:22, 02:47). A recent security investigation highlighted by a tweet from @fmdz387 revealed 954 public instances, with 10 requiring authentication and 429 unreachable, indicating many users exposed their bot gateways (12:53). Another user, Alex Finn, demonstrated the power of custom skills by having his bot (Henry) use an ElevenLabs skill to call a restaurant and complete a reservation when OpenTable failed (13:31). The creator emphasizes that the power of these agents comes with inherent risks, requiring users to be aware of security best practices, as the system can access vast amounts of personal data (03:27, 09:38, 22:58).

Context: The video features Peter Steinberger, the creator of ClawdBot, discussing his open-source, self-hosted AI assistant that integrates with various messaging platforms and system tools. The discussion covers the installation process, the agent's capabilities (like using LLMs for complex tasks and controlling devices), and recent security concerns raised on social media regarding improperly configured, publicly exposed instances of the bot.

Detailed Analysis

Peter Steinberger introduces ClawdBot as a powerful, open-source, self-hosted AI assistant that runs locally on a machine or server and interacts via messaging apps like Telegram, Discord, and WhatsApp. He details its capabilities, including managing his computer, calendar, files, health data, and even controlling his smart home lights (01:55, 02:29). He highlights the importance of the TUI (Text User Interface) for the initial setup, comparing the agent interaction style to controlling armies in old video games like Age of Empires II (04:30, 06:24). He stresses that the system is highly capable, even showing a demonstration where his bot successfully made a restaurant reservation by using an external skill (ElevenLabs) when OpenTable failed (13:31). Steinberger also addresses security concerns, referencing a Shodan scan that found 954 instances of ClawdBot exposed online, with 10 requiring auth and 429 unreachable due to users opening ports without proper security, reinforcing the warning that this powerful tool is inherently risky (12:53, 22:58). The installation guide requires Node.js, API keys for LLMs (Anthropic recommended), and setting up a messaging platform, with Telegram being the easiest, though Discord, WhatsApp, and Slack are also supported (03:41, 04:05, 22:22).