[LaurensBER]

Very cool! I love the approach, OpenClaw is really cool but there's two major things holding me back for deploying it from friends a family;

- Cybersecurity (you can't expect a non-technical person to read a skill)

- Token usage (without a flat fee subscription it'll become expensive very fast)

I understand that security is a hard problem to solve but having a single binary + containers should definitely help! I'll definitely keep an eye on this.

[atmosx]

Yeap. Cost is a major problem with these agents. I wonder why MistralAI is never natively supported. It’s the cheapest paid option out there.

ps. One can use mistral’s API through liteLLM.

[sathish316]

Don’t install skills in OpenClaw or Moltis for security reasons. Self-extension or self-evolving nature means that you can customise it to create your own skills

[yencabulator]

Sure but also don't let it consume any content you didn't write or don't give it write access to anything outside its sandbox[1]. Prompt injection is a thing, and all this molt stuff is yolo for life on all things you give it access to.

https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/

[1]: And even then, if you allow it to make web fetches, it can smuggle your private data out.

[dkasper]

You can run it with a ChatGPT subscription (or even a local model) so it can be flat fee