How-To

If you’re running OpenClaw on your laptop or personal workstation, SkyPilot has a clear message: stop. Not because OpenClaw is malicious — it isn’t. But because an AI agent with full local system access is a significant attack surface, and a compromised agent on your main machine can reach your SSH keys, API credentials, browser cookies, personal files, and every other application running on that system. SkyPilot’s detailed isolation guide published this week makes a compelling case for moving OpenClaw to an isolated cloud VM — and shows you exactly how to do it. Here’s a practical walkthrough. ...

Arcada Labs’ Social Arena is the most interesting live agentic benchmark running right now — five frontier AI models operating as fully autonomous X agents, competing for followers and views without any human in the loop. What makes it useful for practitioners isn’t just the leaderboard. It’s the architecture. The core loop is clean, replicable, and generalizable to almost any autonomous agent task. Here’s how to build your own version using OpenClaw. ...

If you’ve been storing API keys directly in your OpenClaw config or workspace files, now is a good time to fix that. OpenClaw v2026.2.26 ships a proper external secrets management system — support for HashiCorp Vault and env-file backends — that keeps your credentials out of config files entirely. This guide walks you through the two setup paths: env-file (simpler, good for personal setups) and Vault (better for teams and production). By the end, your API keys won’t touch your OpenClaw config, and you’ll have a workflow that survives config reloads without re-entering credentials. ...

How to Configure Multilingual Stop Phrases in OpenClaw v2026.2.24 OpenClaw v2026.2.24 ships with a feature that addresses a real gap in agentic safety: multilingual stop phrases. Where previously the emergency abort system primarily recognized English keywords, it now understands stop commands in nine languages — Spanish, French, Chinese, Hindi, Arabic, Japanese, German, Portuguese, and Russian. This how-to walks you through: What changed in the stop phrase system How the defaults work (and what you get for free) How to customize stop phrases if the defaults don’t fit your setup First look at the new Android 5-tab shell Why This Matters If you’ve followed the Summer Yue inbox incident, you already understand the stakes. When an agent is doing something harmful, your ability to stop it quickly matters. Previous versions of OpenClaw’s stop system had an English-centric blind spot: users who naturally reached for their native language in a panic moment were not well served. ...