MIIT Cybersecurity Platform Releases Security Risk Prevention Advice for OpenClaw Agents

On March 11, the Ministry of Industry and Information Technology's Network Security Threat and Vulnerability Information Sharing Platform (NVDB) released the "Six Do's and Six Don'ts" advice for security risks of OpenClaw ("Lobster") open-source agents. Targeting security risks in typical scenarios like intelligent office, development and operation, personal assistant, and financial transactions, it organized multiple parties to propose preventive measures.

Typical risks include supply chain attacks, sensitive information leakage, account takeover, etc. Users are advised to use the latest official version, strictly control internet exposure, adhere to the principle of minimal permissions, be cautious with third-party skill packages, guard against social engineering attacks, and establish a long-term protection mechanism.