Meridiano

Add Article

No Image Available

Article Details

Title

Article: China issues new safety rules for OpenClaw. Here are the dos and don’ts

Impact Score

5 / 10

AI Summary (Processed Content)

China's National Vulnerability Database has issued new safety guidelines for users of OpenClaw, outlining specific recommended and prohibited practices. The "dos" include using the official latest version, minimizing internet exposure, and granting minimal permissions.

The "don'ts" warn against using outdated or third-party versions, exposing AI instances to the internet, and installing unverified skill packs. The advisory aims to address cybersecurity risks amid the tool's rapid adoption.

The main topics covered are cybersecurity guidelines, risk mitigation for AI tools, and specific user recommendations and prohibitions.

Original URL

https://www.scmp.com/tech/article/3346269/china-issues-new-safety-rules-openclaw-here-are-dos-and-donts?utm_source=rss_feed

Source Feed

Tech - South China Morning Post

Published Date

2026-03-11 15:13

Fetched Date

2026-03-11 12:30

Processed Date

2026-03-11 12:32

Embedding Status

Present

Cluster ID

Not Clustered

Raw Extracted Content

China issues new safety rules for OpenClaw. Here are the dos and don’ts
Authorities outline six dos and six don’ts for OpenClaw users, warning of risks amid an adoption frenzy
The advisory, developed in collaboration with AI agent providers, vulnerability platform operators and cybersecurity firms, aims to address risks in typical use cases of “lobster”, OpenClaw’s mascot, according to a Wednesday statement from the MIIT-run National Vulnerability DataBase (NVDB).
The guidelines recommend six practices: use the official latest version, minimise internet exposure, grant only the minimum permissions necessary, exercise caution when using the skill market filled with third-party offerings, guard against browser hijacking, and regularly check for patch vulnerabilities.
By contrast, users are warned against using outdated or third-party mirror versions of OpenClaw, exposing AI agent instances to the internet, enabling administrator accounts during deployment, installing skill packs that require entering passwords, browsing unverified websites, and disabling detailed log auditing functions.
The NVDB also provided instructions on restricting internet access, scanning files and uninstalling the software.