The Ministry of Industry and Information Technology of China has released the "Six Do's and Six Don'ts" recommendations for OpenClaw Security Risks

On March 11, China’s Ministry of Industry and Information Technology (MIIT) released the *“Six Do’s and Six Don’ts” Guidelines for Mitigating Security Risks of OpenClaw in Open-Source Intelligent Systems* via its Network Security Threat and Vulnerability Information Sharing Platform. The guidelines outline typical security risks associated with OpenClaw across key application scenarios: - **Smart office**: Prominent risks include supply chain attacks and enterprise intranet penetration; - **Development & operations**: Key risks involve leakage of sensitive system/device information, plus hijacking and unauthorized control; - **Personal assistant**: Notable risks cover personal information theft and sensitive data leakage; - **Financial transactions**: Risks include triggering erroneous transactions or even account takeover. Additionally, the MIIT issued six critical usage recommendations: 1. Use only the official latest version of OpenClaw; 2. Strictly limit the system’s internet exposure surface; 3. Adhere to the principle of least privilege for access controls; 4. Exercise caution when using third-party skill markets; 5. Guard against social engineering attacks and browser hijacking; 6. Establish a long-term security defense mechanism.