Is OpenClaw safe?
OpenClaw relays CDP control of your signed-in browser tabs to a paired local automation service over an authenticated WebSocket.
OpenClaw is a browser-automation tool: once paired, it forwards Chrome DevTools Protocol commands from a locally connected relay/gateway to your open tabs, letting that paired service read page content, cookies, storage, and inputs and drive the tab via chrome.debugger. By default every ordinary signed-in http/https tab is reachable this way unless you pause it individually in the popup; incognito tabs and non-http(s) pages are excluded. The connection to the relay requires a pairing token and an authenticated challenge/response, so control is limited to whatever service holds that pairing.
Who publishes itOpenClaw Foundation - no other listings under this identity
OpenClaw Foundation - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed OpenClaw contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- Paired local OpenClaw relay/Gateway service
OpenClaw sends data to Paired local OpenClaw relay/Gateway service. Named as a recipient in this extension's own analysis.