Is OpenClaw safe?

OpenClaw relays CDP control of your signed-in browser tabs to a paired local automation service over an authenticated WebSocket.

OpenClaw is a browser-automation tool: once paired, it forwards Chrome DevTools Protocol commands from a locally connected relay/gateway to your open tabs, letting that paired service read page content, cookies, storage, and inputs and drive the tab via chrome.debugger. By default every ordinary signed-in http/https tab is reachable this way unless you pause it individually in the popup; incognito tabs and non-http(s) pages are excluded. The connection to the relay requires a pairing token and an authenticated challenge/response, so control is limited to whatever service holds that pairing.