← Back to context

Comment by LaurensBER

6 days ago

Very cool! I love the approach, OpenClaw is really cool but there's two major things holding me back for deploying it from friends a family;

- Cybersecurity (you can't expect a non-technical person to read a skill)

- Token usage (without a flat fee subscription it'll become expensive very fast)

I understand that security is a hard problem to solve but having a single binary + containers should definitely help! I'll definitely keep an eye on this.

Yeap. Cost is a major problem with these agents. I wonder why MistralAI is never natively supported. It’s the cheapest paid option out there.

ps. One can use mistral’s API through liteLLM.

Don’t install skills in OpenClaw or Moltis for security reasons. Self-extension or self-evolving nature means that you can customise it to create your own skills

  • Sure but also don't let it consume any content you didn't write or don't give it write access to anything outside its sandbox[1]. Prompt injection is a thing, and all this molt stuff is yolo for life on all things you give it access to.

    https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

    [1]: And even then, if you allow it to make web fetches, it can smuggle your private data out.

You can run it with a ChatGPT subscription (or even a local model) so it can be flat fee