Block IX · Agents that work on their own · Lesson 48

OpenClaw: your personal assistant on your phone

You'll set up an agent that answers on WhatsApp, Telegram and Discord, uses skills from ClawHub and controls the browser. And you'll learn to lock it down, because hundreds of malicious skills ended up circulating.

Go to the course

What you'll see in this lesson

  1. OpenClaw: your assistant, in the apps you already use

    It's an open-source, MIT-licensed assistant that runs on your machine and answers you on WhatsApp, Telegram, Discord and more.

  2. Installation and first run

    An official installer and a wizard, openclaw onboard, leave the gateway running as a service.

  3. WhatsApp, Telegram and Discord

    Each channel connects differently: a QR code for WhatsApp, a bot token for Telegram and Discord.

  4. Pairing: nobody gets in without your OK

    If a stranger messages the assistant, they get a code and nothing is processed until you approve it.

  5. ClawHub skills: install wisely

    ClawHub is OpenClaw's skill catalog; each skill expands what your assistant can do.

  6. The warning: hundreds of malicious skills

    In February 2026, Koi Security reviewed 2,857 ClawHub skills and found 341 malicious ones, almost all from the ClawHavoc campaign.

  7. Browser control without needless risk

    OpenClaw can open websites, click, type and take screenshots; by default it does so in an isolated browser.

  8. Lock it down: Tailscale and minimal permissions

    Keep the gateway listening only on your machine, connect through a private network and give the agent only what it needs.

  9. Summary: OpenClaw, useful and safe

    An assistant on your phone that works on your machine, with the door closed to strangers and dubious skills.

Tools and concepts

Sign in with your Google account to access this lesson and the whole course.

Go to the courseSee the full syllabus

More lessons in this block