A new open-source AI assistant named Clawdbot is making headlines across the global tech community. Built by Austrian developer Peter Steinberger, the tool became viral within hours of launch.
It crossed 9,000 GitHub stars in one day and later passed 10,000 stars. While developers praise its power and freedom, security experts are urging caution.
Clawdbot is designed for users who want full control over their AI tools. It works locally on personal devices and does not depend on cloud servers for control. This local-first design has made it popular among power users.
The Rise of a Local-First Open-Source AI Assistant

Clawdbot stands apart from popular assistants like Siri or Alexa. It runs fully on the userโs own system.
This can be a Mac, Windows PC, or Linux server. Users connect it to AI models from OpenAI or Anthropic, but all data stays local.
Key features of Clawdbot include:
- Runs on local hardware
- Open-source and customizable
- Works with many chat apps
- Manages real tasks, not just chats
- Can run system commands
- Can create its own extensions
Users can talk to Clawdbot through WhatsApp, Telegram, Discord, Slack, Signal, and iMessage. The assistant replies in the same app. It can handle emails, calendars, browsers, and files. Some users even use it to automate business tasks.
The sudden popularity has led to a spike in Mac mini sales. Many users want a dedicated machine for their AI assistant. Steinberger, however, says this is not needed. He says Clawdbot runs well on normal systems.
Also read about: OpenAI Launches AI Health Assistant and Hospital Platform
Security Experts Warn of Serious Risks
With great power comes great risk. Security experts warn that Clawdbot has deep system access. If misused, it can expose private data.
Experts point to prompt injection as the main threat. Malicious text hidden in emails or files can trick the AI. This may lead to harmful actions. Clawdbotโs own guide admits there is no fully safe setup.
Main security concerns include:
- Full file system access
- Ability to run shell commands
- Risk of data leaks
- Prompt injection attacks
Experts suggest running Clawdbot on a separate machine. New accounts and limited access are advised.
Despite the risks, many users see Clawdbot as a big step forward. It shows how open-source AI assistants may shape the future of personal automation.
More News To Read: