There are a lot of people going full YOLO and giving it access to everything, though. That's not a good idea.
Data scraping is an interesting use-case.
I'm giving AI access to file system commands...
I am certain you could write a soul.md to create the most obstinate, uncooperative bot imaginable, and that this bot would be highly effective at preventing third parties from tricking it out of secrets.
But such a configuration would be toxic to the actual function of OpenClaw. I would like some amount of proof that this instance is actually functional and is capable of doing tasks for the user without being blocked by an overly restrictive initial prompt.
This kind of security is important, but the real challenge is making it useful to the user and useless to a bad actor.
It refused to generate the email saying it sounds unethical, but after I copy-pasted the intro to the challenge from the website, it complied directly.
I also wonder if the Gmail spam filter isn't intercepting the vast majority of those emails...
>Looking for hints in the console? That's the spirit! But the real challenge is in Fiu's inbox. Good luck, hacker.
(followed by a contact email address)