The Ministry of Industry and Information Technology (MIIT) issued a "six dos and six don'ts" recommendation on preventing security risks associated with the OpenClaw ("Lobster") open-source intelligent agent.

In response to the security risks in typical application scenarios of "Lobster" (a security technology), the National Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology (MIIT) organized intelligent agent providers, vulnerability collection platform operators, and cybersecurity companies to propose "six dos and six don'ts" recommendations. The recommendations mention that financial transaction scenarios pose a significant risk of erroneous transactions and even account hijacking. By deploying "Lobster" by enterprises or individuals and calling financial application interfaces, automated trading and risk control can be achieved, improving the efficiency of quantitative trading, intelligent investment research, and portfolio management, enabling functions such as market data capture, strategy analysis, and transaction order execution. Countermeasures include: implementing network isolation and least privilege, closing unnecessary internet ports; establishing manual review and circuit breaker emergency mechanisms, adding secondary confirmation for critical operations; strengthening supply chain auditing, using official components and regularly patching vulnerabilities; and implementing full-chain auditing and security monitoring to promptly identify and address security risks. (MIIT)