logoalt Hacker News

eric-bureltoday at 8:21 AM2 repliesview on HN

Before using make sure you read this entirely and understand it: https://docs.openclaw.ai/gateway/security Most important sentence: "Note: sandboxing is opt-in. If sandbox mode is off" Don't do that, turn sandbox on immediately. Otherwise you are just installing an LLM controlled RCE.

There are still improvements to be made to the security aspects yet BIG KUDOS for working so hard on it at this stage and documenting it extensively!! I've explored Cursor security docs (with a big s cause it's so scattered) and it was nothing as good.


Replies

TZubiritoday at 9:15 AM

It's typically used with external sandboxes.

I wouldn't trust its internal sandbox anyway, now that would be a mistake

show 1 reply
manuelndtoday at 9:26 AM

[dead]