Summary of "Clawdbot (Moltbot) – Полный гайд по безопасной установке"

Summary of the Video: “Clawdbot (Moltbot) – Полный гайд по безопасной установке”

Overview of Clawdbot (Moltbot)

Clawdbot, recently renamed Moltbot due to copyright concerns, is an autonomous AI agent developed by Peter Steinberg. It is built on the Claude SDK, inheriting features such as hooks, skills, and Claude MD.

Key features include:

Memory system: Remembers all interactions and personal data using indexing and search mechanisms, enabling personalized responses.
Proactivity: Can send notifications and reminders (e.g., calendar alerts) via configured webhooks.
No operational restrictions: Executes all commands immediately, can access local or remote systems, modify its own configuration, and self-improve.

Users have likened it to an AI assistant similar to Iron Man’s Jarvis, dubbing it “AGI online.”

Security Concerns and Risks

Installing Clawdbot locally grants it full access to your files, which poses significant risks. Many hacked instances and leaked data exist online.

The video strongly recommends deploying Moltbot on a remote server to isolate it from personal data and reduce risks.

Security best practices emphasized throughout the guide include:

Creating a non-root user to run the bot.
Disabling password login and root SSH access.
Enabling SSH key authentication only.
Configuring a firewall to close all ports except SSH.
Regularly auditing security with built-in commands.
Avoiding sharing API keys or tokens publicly.

Step-by-Step Installation and Setup Guide

Server Deployment:
- Uses Selectel cloud services (myselect.ru) for server hosting.
- Recommends Ubuntu OS with at least 2 cores, 4 GB RAM, and 20 GB disk space.
- Server creation involves generating SSH keys and adding them to the Selectel panel.
- Explains how to freeze the server when not in use to reduce costs.
Connecting to Server:
- Connect via SSH using the generated keys.
- Switch from root to a newly created user with limited privileges.
- Modify SSH configuration to disable root login and password authentication.
- Enable and configure UFW firewall to allow only SSH.
Installing Moltbot:
- Use the official install command from mol.bot to download and install the bot.
- Onboarding involves selecting the AI model backend:
  - Options include Codex, GPT+ (via subscription), or Open Router.
  - The video’s author prefers Open Router with the Gemini 2 Flash model for its speed and large context window.
- Connect the bot to Telegram via Telegram Bot API for easy communication.
- Create a Telegram bot and add its API token to Moltbot’s configuration.
Skills and Plugins:
- Skills are essential for Moltbot’s functionality.
- Use npm to install skill packages from repositories like clothub.
- Examples include video processing and 11 Labs voice synthesis.
- Skills can be manually activated or deactivated via the web UI.
Security Configuration:
- Set up allowlists to restrict bot communication to specific Telegram user IDs.
- Run security audit commands (cldbo Security Audit Deep) to identify vulnerabilities.
- Configure SSH access to a web UI panel for monitoring bot activity, skills, and logs.
- Regularly monitor bot behavior to prevent prompt injection or data leaks.

Features Demonstrated by the Author

Voice interaction: Moltbot can process audio input and respond with voice messages after proper configuration.
Autonomous content fetching: After API key setup, Moltbot can self-authorize and retrieve articles, images, and other media.
Persistent memory: Remembers user preferences and commands across sessions.
Proactive communication: Sends reminders and notifications based on calendar or email triggers.

Warnings and Recommendations

Moltbot is powerful but inherently risky due to its unrestricted access and self-modification capabilities.

Recommendations include:

Avoid running it locally on personal machines.
Carefully manage API keys and tokens; never share them publicly.
Continuously monitor and audit the bot’s activities.
Use remote server isolation and strict security measures to mitigate risks.
Stay updated and cautious as the project evolves.

Main Speakers / Sources

Uncle Dev (video author and presenter)
Peter Steinberg (developer of Clawdbot/Moltbot)
References to Anthropic (copyright concerns and Claude SDK)
Mentions of Selectel cloud platform for server deployment

This video serves as a comprehensive tutorial and security guide for installing and safely operating Clawdbot/Moltbot on a remote server, with practical tips on setup, configuration, and ongoing security management.