海南大学学报(社会科学版)

OpenClaw是大语言模型驱动的自主式智能体，它能够突破应用沙箱隔离，获得系统级执行权，实现了从“被动执行”到“行动主体”的技术跃迁。然而OpenClaw的自主便捷性在释放生产力的同时，也可能引发重大的安全与伦理风险。在安全方面，存在算力消耗量级跃升、算力窃取与数字黑产风险、执行幻觉与跨境数据安全隐患，以及奖励劫持等风险行为；在伦理方面，人类由“效率至上”思维引发的工具依赖与权力让渡，可能造成严重的学术失范与主体性危机。其风险原因根植于巨头公司的商业诉求、OpenClaw的底层架构以及人类的工具依赖性。面对OpenClaw带来的技术红利与伴生的复合风险，应实施基于权限限制与制度规制的综合应对策略。在国际层面，倡导全球共治，统筹跨国算法规制与开源安全生态；在国家层面，积极构筑“权限-算力-责任”三位一体的底线规制体系；在区域层面，争取将海南自贸港打造成为跨境数据与开源插件规制的动态试验区。最终在拥抱数字生产力跃迁的历史进程中，推动OpenClaw安全、健康与可持续的发展。

As an autonomous agent driven by large language models, OpenClaw can circumvent application sandbox isolation to attain system-level executive privileges, achieving a technological leap from "passive execution" to "active agent". While OpenClaw's autonomy and convenience boost productivity, it may also give rise to significant security and ethical risks. On the security front, there are risks such as a dramatic increase in computational power consumption, computational power theft and digital black-market activities, execution illusions and cross-border data security concerns, as well as reward hijacking and other malicious activities. Specifically, OpenClaw induces excessive consumption of computational resources, amplifying the risk of computing power theft and digital black industry. It is also susceptible to execution hallucinations, and leads to the security risks of cross-border data as well as the reward hijacking. From an ethical perspective,the tool dependency relinquishment of power resulting from the "efficiency-first" mindset may lead to serious academic misconduct and a crisis of agency. The root causes of these risks lie in the commercial interests of tech giants, the underlying architecture of OpenClaw, and human reliance on technology. In view of the technological benefits and associated compound risks posed by OpenClaw, a comprehensive response strategy based on access restrictions and institutional regulations should be implemented. At the international level,global governance should be advocated to coordinate cross-border regulations on computing power with the open-source security ecosystem. At the national level, a three-prolonged regulatory framework centered on "authorization, computing power, and accountability" must be actively built. At the regional level, Hainan Free Trade Port should be built as a dynamic pilot zone for the regulation of cross-border data and open-source plugins. Ultimately, all these will promote the safe, healthy and sustainable development of OpenClaw in the historical process of embracing the leap of digital productivity.