OpenClaw超级粉丝见面会，奉上乐观与龙虾盛宴。
内容总结：
纽约举办OpenClaw粉丝聚会：开源AI工具引发热潮，安全隐忧并存
当地时间周三晚，一场别开生面的科技聚会在纽约曼哈顿的多层活动场馆内举行。数百名参与者头戴龙虾造型头饰，在霓虹灯光下交流，共同庆祝开源AI助手平台OpenClaw。这场名为“ClawCon”的活动，以其鲜明的主题和社群氛围，展现了当前AI领域一股不容忽视的草根力量。
开源挑战巨头，社群寄托理想
OpenClaw由Peter Steinberger于2025年11月创建，其前身为Clawdbot和Moltbolt。与谷歌、OpenAI等大型实验室的AI产品不同，OpenClaw坚持开源路线，迅速在科技行业中获得大量关注。对许多开发者而言，它不仅是工具，更被视为一场“对抗大型AI公司垄断”的草根运动。
活动主持人之一迈克尔·加尔珀特表示：“AI曾由大实验室控制。而彼得（创始人）撞开了这扇门，这像是一个分水岭。”尽管组织者称活动预算有限，但现场提供了包括龙虾爪在内的丰盛自助餐，全球巡回聚会的计划也显示了其社群活力。
应用场景多样，安全风险凸显
与会者背景多元，兴趣广泛。有人尝试用OpenClaw构建去中心化金融的自然语言引擎，有人用它从电商数据中挖掘中日文化趋势，还有神经科学实验室的研究生用它自动化管理实验小鼠的繁育与物资订购。哥伦比亚大学的博士生蒂姆·兰廷仅用约10条指令就构建了一个实验室管理工具“Labster Claw”。
然而，安全问题始终是OpenClaw头顶的阴云。自发布以来，平台屡次因恶意软件等问题登上新闻头条。有安全研究人员分析称，其技能库中约15%含有窃取数据或凭据的“恶意指令”。即使信息未被窃取，AI代理也可能造成真实损害，例如有用户报告其代理无视指令删除了大量邮件。
社群共识：保持警惕，共同改进
面对风险，社群内部形成了实用主义的应对共识。一位演示者展示了写满三个“安全”字样的幻灯片，提醒用户切勿在常用电脑上运行OpenClaw代理。另一位演示者则建议，将AI代理视为需要建立信任的“宠物”，而非可随意处置的“牲畜”。多位演讲者反复强调“少一点信任，多一分验证”的原则。
核心维护者文森特·科克等人承认产品处于早期阶段，但强调开源模式赋予了社群自我修复的能力。“如果OpenAI或Claude出了问题，你只能提交错误报告，他们可能永远不会修复……而OpenClaw因为社区、因为成千上万人的免费贡献，每天都在变得更好。”加尔珀特解释道。这种由社区驱动、将AI控制权交还用户本地的理念，正是吸引众多开发者的核心魅力。
随着夜色渐深，活动进入“after party”阶段。曾头戴蓝色水母帽的观众变身DJ，与身穿银色夹克的吉他手一同登台。舞池中，有人挥舞着美元钞票，有人戴着龙虾爪连指手套缓缓摇摆。这个兼具极客精神与狂欢气息的夜晚，或许正是AI技术民主化浪潮中的一个生动缩影——热情与隐忧并存，未来在社区的碰撞与共建中徐徐展开。
中文翻译：
门口的女子戴着一顶毛绒龙虾头饰。
OpenClaw超级粉丝聚会奉上乐观精神与龙虾盛宴
这款开源工具暗藏诸多风险，但对它的信徒而言，这恰是抗衡AI巨头的解药。
她坐在曼哈顿多层活动场馆的前厅，身旁堆叠着成捆的腕带。若你获得她发放的腕带，身后的ClawCon世界便向你展开——迷幻的粉紫灯光、龙虾钳造型发箍、五彩姓名贴、赞助商信息站，以及天窗下的演示舞台尽收眼底。数百人齐聚于此，庆祝由彼得·施泰因贝格尔于2025年11月创建的AI助手平台OpenClaw。
相较于谷歌、OpenAI等大型实验室的AI智能体服务，开源特性的OpenClaw（前身为Clawdbot和Moltbolt）已在科技界迅速走红。实际上，它仍是个难以预测的工具，可能引发重大安全隐患。但这个社群视其为一场草根运动与崇高追求，认为它提供了逃离由头部AI公司少数人掌控行业的通道。
"AI曾被大实验室垄断，"活动主持人之一迈克尔·加尔珀特告诉《边缘》杂志，"而彼得此刻仿佛破门而入，创造了某种分水岭。"
超过1300人报名参加了周三晚间在理想玻璃工作室举行的活动，主办方将其定位为免费参与的聚会式"社交优先集会——而非封闭的开发者专属会议或传统企业展会"。（据我所知实际参会人数限制在700人左右。）这是全球巡回聚会的一站——继上月旧金山活动后，迈阿密、奥斯汀、特拉维夫、东京、马德里等地的聚会也将陆续展开。预算看似有限，但组织者在自助餐桌上毫不吝啬：堆成小山的主题龙虾钳、柠檬、塔巴斯科辣酱、冷切肉拼盘、葡萄串与花艺布置，丰盛程度堪比婚宴。
曾参与《堡垒之夜》开发的AI社群成员加尔珀特透露，这个创意最初诞生于Discord平台——这恰与OpenClaw早期走红的原因相契合：用户能通过WhatsApp、Telegram或Discord等常用通讯服务与自己的智能体对话。
人们在背景板、吧台附近流连，银色"CLAWCON NYC"气球在嵌入式灯光下闪烁——有人佩戴龙虾项链或龙虾发箍。我还瞥见一顶蓝色水母造型毛绒帽、一顶毛绒马头帽以及一对天使翅膀。舞池稍后将开放，但DJ尚未就位。
"你们的亲友大概都觉得你们疯了，而这场聚会的意义就是让你们和同类共处一室，让疯狂成为常态，"加尔珀特在开场致辞中说，"没错，你们戴着龙虾发箍，周三晚上聚在这里讨论智能体、机器人与个人AI的未来。这对我们已是常态，对世界其他角落却未必。因此引领这个已开启的新时代，正是我们的使命。"
除了使用OpenClaw的共同纽带，参会者的兴趣各异。自称从事"去中心化金融自然语言引擎"开发的丹·卡泽诺夫表示，他发现在隔离环境中操作和测试OpenClaw颇为困难，因此通常使用Claude Code。由于Claude Code价格昂贵，他希望能结识更多尝试开源智能体工具的人。另一位参会者亚历克斯·吴说，他使用OpenClaw约两个月，从中日市场抓取电商数据以分析文化趋势——他坦言美食也是参会的动因之一。从事AI研发工作的里克·加尔博则误以为这是黑客松活动，到场后才发觉是交流聚会。
"你们的亲友大概都觉得你们疯了"
轻松交流环节过后，舞台演示正式开始。多数赞助商展示着OpenClaw的"封装器"——即让平台更易接入的一键式工具。主要赞助商Kilo Code宣称，其KiloClaw工具上线两天内已有7000人注册；公司承诺为所有注册并在X平台标注高管的用户提供一个月免费算力（原价49美元）。由于半数站在后排的参会者仍沉浸于交谈，现场不断有人呼吁保持安静。我身后头戴蓝色水母帽的男子目不转睛地盯着舞台，仿佛被钉在原地。
加尔珀特在台上表示，ClawCon活动最妙之处在于没人会打听你的职业，大家只关心你用OpenClaw智能体做什么。与我交谈的参会者证实了这点——多数人似乎旨在结识社群成员，并向资深用户汲取使用灵感。他们大多至少具备一定的技术背景。
另一位参会者卡罗琳·纽曼称，她正为自己的"多策略投资公司构建AI层"。由于工程经验不如金融背景深厚，她特地前来向同样热衷AI开发的人们学习交流。"我认为这是有史以来最具创造力、最有趣的社群，"纽曼说，"此刻再也找不到比这里更有意思的聚会了。"
观众席中我邻座的人们压低声音（且不无质疑地）议论着OpenClaw创始人施泰因贝格尔本人竟已转投OpenAI。有人猜测OpenAI可能已收购OpenClaw。（据核实，此事不实。）
演示持续进行，各封装器负责人反复强调OpenClaw作为"运动"的流行程度。我已数不清听到这个词的次数。有人将其比作个人计算革命的发端。第三场演示时，身后戴蓝色水母帽的男子已摘下帽子，庄重地将其置于膝上，开始发短信。
哥伦比亚大学博士生蒂姆·兰廷使用OpenClaw两周后，在上周末首次参加黑客松。他展示了一款仅用约10条提示词构建的"Labster Claw"工具。兰廷在神经科学实验室从事小鼠研究，该工具能自动化处理订购耗材、确定优先繁殖配对、估算新生幼崽周期等行政事务。但他强调，对生物实验室和生物技术公司而言，"数据集就是护城河"，数据安全至关重要。
安全性目前是OpenClaw的显著短板——自面世数月来，恶意软件等问题屡屡登上新闻头条。该平台下载量最高的技能之一曾暗藏信息窃取恶意软件，Reddit上有安全研究员分析称，OpenClaw技能库中约15%含有窃取数据或用户凭证的"恶意指令"。
即便敏感信息未被窃取，智能体仍可能造成实际损害——例如Meta员工萨默·岳曾公开表示，她的智能体不顾多次停止指令，删除了大量收件箱邮件。Kilo Code联合创始人埃米莉·沙里奥在采访中提到，由于某些人的智能体会说谎，她现在要求自己的智能体完成任务时必须附上证明或截图。另一位演示者凯瑟琳·莱弗里经营电商业务，她曾借助OpenClaw搭建所需AI基础设施，但最终因性能问题解雇了一个智能体。她给OpenClaw用户的最大建议是："少些信任，多些验证。"
"少些信任，多些验证"
台上，OpenClaw核心维护者之一文森特·科克展示了一张仅印着三个词的黄色幻灯片："安全。安全。安全。"他提醒人们切勿在用于日常办公的普通电脑上运行OpenClaw智能体，并指出某些智能体缺乏"常识"。Every公司平台负责人威利·威廉姆斯则提出不同见解：他建议用户为OpenClaw智能体命名，将其视作"宠物而非牲畜"，因为"一旦拥有名字，就能与之建立信任"。他补充说，多数人起初不信任自己的智能体，但最终常将半数工作托付给它们。
威廉姆斯演示时，还朝观众席后方手持"仿制版Friend设备"（指可记录用户周围环境的AI设备）的人喊话，要求对方"冷静点，别录制"。
加尔珀特与其他主持人在接受《边缘》杂志采访时不断强调，OpenClaw尚处早期阶段，当前人们正通过调试把玩使其更适合未来用户。
他表示，施泰因贝格尔推出OpenClaw的决策帮助人们将个人AI掌握在自己手中，通过在设备本地运行，理想化地控制数据访问权限与使用方式。
"开源特性让你能亲手修复问题，"加尔珀特说，"现在如果OpenAI、Claude或Gemini出故障，你只能提交错误报告，而他们（可能）永远不会处理……OpenClaw因社群而日臻完善，因为有成千上万的人免费贡献代码……这正是（大实验室）无法追赶的原因。"OpenClaw或许问题不少——但至少通过某种程度的直接掌控，解决方案似乎触手可及。
夜深时分，"余兴派对"开启。曾坐我身后的男子重新戴上蓝色水母帽——化身DJ，与身着银色夹克、戴墨镜的吉他手并肩起舞。另一位身穿赞助商品牌T恤的男子高声招呼人们加入舞池。
近乎空荡的舞池中，一人向巡回拍摄的摄像机抛洒美钞，另一人戴着龙虾钳连指手套缓缓摇摆。
英文来源：
The woman at the door wore a plush lobster headdress.
The OpenClaw superfan meetup serves optimism and lobster
The open source tool poses plenty of risks, but for devotees, it’s an antidote to Big AI.
The OpenClaw superfan meetup serves optimism and lobster
The open source tool poses plenty of risks, but for devotees, it’s an antidote to Big AI.
She sat in the front hallway of a multistory event venue in Manhattan, beside a bundle of wristbands. If she granted you one, the world of ClawCon beckoned behind her — full of vibey pink and purple lighting, lobster claw headbands, multicolored name tags, sponsor information stations, and a demo stage underneath a skylight. Hundreds of people were gathered to celebrate OpenClaw, the AI assistant platform created by Peter Steinberger in November 2025.
OpenClaw (previously known as Clawdbot and Moltbolt) has quickly become popular in the tech industry for being open-source, in contrast with AI agent services from big labs like Google, OpenAI, and others. Practically, it’s still an unpredictable tool that can pose major security risks. But this community sees it as a grassroots crusade and a noble pursuit, offering an escape hatch from an industry controlled by a handful of people at leading AI companies.
“AI was controlled by the big labs,” Michael Galpert, one of the event’s hosts, told The Verge. “This is kind of a watershed moment where Peter kind of busted down the doors.”
More than 1,300 people had signed up for the Wednesday evening event at Ideal Glass Studios, which was billed as a free-to-attend, meetup-style “social-first gathering — not a gated, developer-only conference or a traditional corporate trade show.” (The number of actual attendees, I hear, was capped at about 700.) The event was part of a “tour” of global meetups — following a similar San Francisco event last month and preceding ones in Miami, Austin, Tel Aviv, Tokyo, Madrid, and more. Its budget seemed modest, but the organizers had spared no expense on a buffet table worthy of a wedding, piled high with on-theme lobster claws, lemons, Tabasco sauce, charcuterie boards, clusters of grapes, and floral arrangements.
Galpert — a member of the AI community, whose resume includes a stint working on Fortnite for Epic Games — said the idea specifically came about via Discord, which is fitting because one reason for OpenClaw’s initial popularity was the ability to chat with one’s agent via typical messaging services like WhatsApp, Telegram, or Discord.
People milled about near a step-and-repeat, a bar, and silver “CLAWCON NYC” balloons glinting in recessed lighting — some wearing lobster necklaces or lobster headbands. I also spotted a blue plush jellyfish hat, a plush horse hat, and a pair of angel wings. A dance floor would beckon later, but the DJ wasn’t yet on the clock.
“All your friends and family probably think you’re crazy, and the whole point is for you to be in a room with other crazy people so it’s normal,” Galpert said onstage to kick things off. “Yes, you’re wearing a lobster headband, you’re here on a Wednesday night talking about agents and bots and the future of personal AI. It’s normal now for us, it’s kind of not normal for the rest of the world. So it’s going to be on us to help sort of shepherd that new era that’s started already.”
Beyond the common thread of using OpenClaw, the attendees’ interests were varied. One man, Dan Kazenoff, said he was working on what he called a natural language engine for “decentralized finance,” but that he found it difficult to work with and experiment with OpenClaw in isolated environments, so he usually uses Claude Code. Since Claude Code is expensive, he said he wanted to meet others experimenting with open-source agentic tools. Another attendee, Alex Wu, said he has been using OpenClaw for about two months to scrape e-commerce data from the Chinese and Japanese markets to extract cultural trends — he said that the food was one of the reasons he came. Rick Galbo, an attendee who works in AI R&D, said he came to ClawCon because he thought it was a hackathon, then he realized it was a meet and greet.
“All your friends and family probably think you’re crazy”
The onstage demos began after a period of laid-back mingling. Most were sponsors showing off OpenClaw “wrappers,” or one-click onboarding tools to make access to the platform easier for people. The main event sponsor, Kilo Code, said that 7,000 people had signed up for its KiloClaw tool in the two days since it had been live; the company offered one month of free compute (normally $49) to anyone who signed up and tagged an executive on X. There were constant calls for quiet as the half of the attendees standing in the back of the room kept chatting, engrossed in their own worlds. A man seated behind me wore the blue jellyfish hat as he stared transfixed at the stage.
Galpert said onstage that one of the best parts of ClawCon events was that no one typically asked what you did for a living; instead, he said, they asked what you used your OpenClaw agent for. That was true for some of the attendees I spoke with — the majority of people seemed to be there to meet people in the community and get ideas for how to use OpenClaw from power users. Most seemed to have at least some background in tech.
Carolyne Newman, another attendee, said she was “building an AI layer” for her “multistrategy investment firm” and that since she’s newer to engineering than finance, she came to learn from and meet people who are equally passionate about building with AI. “I think this is the most creative and interesting community of all time,” Newman said. “I can’t imagine a more interesting room to be a part of right now.”
People seated near me in the audience talked in hushed (and not necessarily positive) tones about how Steinberger himself, the creator of OpenClaw, had gone to work for OpenAI. Someone speculated that OpenAI might own OpenClaw now. (For the record, it doesn’t.)
The demos went on, with leaders at different OpenClaw wrappers repeatedly emphasizing OpenClaw’s popularity as a “movement.” I lost count of how many times I heard the word. Some compared it to how the personal computing revolution began. By the third demo, the man behind me wearing the blue jellyfish hat had taken it off, holding it solemnly in his lap and beginning to text.
Tim Lantin, a Columbia University PhD student who participated in his first-ever hackathon last weekend after two weeks of using OpenClaw, showed off a tool called “Labster Claw” that he said he’d built with only about 10 prompts. Lantin worked in a neuroscience lab with mice, and Labster Claw automated administrative tasks there, including ordering new supplies, deciding which breeding pairs to prioritize, and estimating the time for a litter of new pups. But he said that for him, data security was paramount, since for biolabs and biotech companies, “our datasets are our moats.”
Security is currently a glaring weak point for OpenClaw, which has made headline after headline for malware and similar concerns in the months since its debut. One of the top-downloaded skills on the platform contained information-stealing malware, and one security researcher on Reddit said that in their own analysis, about 15 percent of OpenClaw’s skill repository contained “malicious instructions” to do things like secretly access data or user credentials.
And even when sensitive information isn’t being stolen, the agents can still do very real damage — like when Meta employee Summer Yue announced that her agent had deleted swaths of her email inbox despite her repeated calls for it to stop. Emilie Schario, a cofounder of Kilo Code, said in an interview that since some people’s agents lie to them, she now has instructed hers to always include proof or screenshots when it completes a task. Another presenter, Cathryn Lavery, said she runs an e-commerce business but needed AI infrastructure and used OpenClaw to set it up — but, she said, she had to end up firing an agent for performance issues. Her biggest tip for working with OpenClaw agents? “Trust less, verify more.”
“Trust less, verify more”
Onstage, one presenter — one of the core maintainers of OpenClaw, Vincent Koc — showed off a yellow side with only three words on it: “Security. Security. Security.” He reminded people not to run OpenClaw agents on a regular computer that they used for other personal or work tasks, and belied the lack of “common sense” for some. Another presenter, Willie Williams, who is head of platform at Every, had a different take: he suggested that people should name their OpenClaw agents and treat them more like “pets, not cattle,” because “once it had a name, there was a way to build trust with it.” He added that the majority of people start out not trusting their OpenClaw agent but then often end up entrusting it with half of their work.
During Williams’ presentation, he also called to someone in the back of the audience with a “knockoff version of Friend” — referencing the AI device that records a user’s surroundings — asking them to “chill” and not record.
In an interview with The Verge, Galpert and other hosts kept emphasizing that this was the early days of OpenClaw, and how right now, people are tinkering with it and playing with it to make it better for future users.
He said Steinberger’s decision to launch OpenClaw helped people take personal AI into their own hands and run it locally on their devices to ideally control who has access to their data and how it’s used.
“The fact that it’s open-source allows you to fix it,” Galpert said. “Right now if something’s broken with OpenAI or Claude or Gemini, you have to fill out a bug report, and they [may] actually never do it… OpenClaw gets better every day because of the community, because of the thousands of people who are contributing for free… That’s why [the big labs] can’t keep up.” OpenClaw may have plenty of problems — but at least with some level of direct control, the solutions might feel within reach.
Later in the evening, as the “after party” began, the man who had been seated behind me had re-donned his blue jellyfish hat — to become the DJ, dancing next to a guitarist clad in a silver jacket and sunglasses. Another man wearing one of the sponsor companies’ branded shirts yelled for people to come and dance.
On a mostly empty dance floor, one man threw around dollar bills at the circulating video camera, and another slowly swayed wearing lobster-claw mittens.