OpenClaw: The Rise of an Open Source Personal Assistant and Its Security Lessons
Peter Steinberger and team share insights on new contribution dynamics in open source projects.
1The Rapid Rise of OpenClaw
Started as a weekend project by Peter Steinberger in November 2025, OpenClaw is a personal AI assistant that runs on users' devices and integrates with existing messaging channels. By August 2026, the project showed extraordinary growth with 388,000 stars, 81,000 forks, and over 80,000 commits on GitHub. This growth reflects the open source community's growing interest in AI-powered projects.
2The Changing Nature of Contributions
OpenClaw maintainers observed traditional pull requests being replaced by 'prompt requests.' Some contributors opened hundreds of automated pull requests, creating a flood of activity that challenged human review. This shifted the challenge from attracting participation to identifying valuable contributions. Josh Lehman noted these automated software factories scanning for issues and putting pressure on the project.
3Opportunities for New Participants
The project aimed to be accessible to first-time open source contributors, non-developers, and those using AI agents. Instead of rejecting imperfect contributions, maintainers looked for promising ideas and collaborated to refine changes. Vincent Koc highlighted that many merged first-time contributions came from non-developers solving specific problems using AI agents.
4The Dual Nature of Agents
While AI agents help people save time, they can also make it harder to stop working. Val Alexandar observed users skipping sleep to complete tasks overnight. Josh Lehman shared how agents allowed him to spend more time with his kids. Maintainers sometimes announce breaks to maintain balance, as Sally O'Malley mentioned with her 'touching grass' messages.
5Paths to Earning Trust
There was no single path to becoming an OpenClaw maintainer. Contributors gained trust through security work, integrations, or community participation. Vincent Koc started working on security to get Peter Steinberger's attention, while Brad Groux developed a Microsoft Teams plugin. Val Alexandar found ways to add value in community discussions.
6New Trust Signals
As contribution counts became less meaningful, the team identified new signals like agent transcripts, screenshots, and explanations of thought processes. Peter Steinberger emphasized that what mattered wasn't who wrote the code but whether contributors understood how features interacted with the project. Evidence of testing and consideration became crucial for pull requests.
7Reviewing Code with AI
Maintainers increasingly relied on AI tools to review AI-generated contributions. Val Alexandar uses GitHub Copilot for reviews, which provides clarity on file changes. Josh Lehman noted how maintainers directly editing pull requests became normalized in this project, reflecting a more hands-on approach to improving submissions.
8Security Challenges
OpenClaw's rapid growth brought security challenges like software supply chain risks. Maintainers shared lessons from GitHub's Secure Open Source Fund and stressed the value of connecting with others facing similar issues. These experiences underscored the importance of security in open source projects, especially those integrating AI technologies.
9The Future of Open Source and AI
OpenClaw's story demonstrates how AI and open source communities are intertwining. While transforming traditional contribution models, the project also sets new standards for security and balance. These experiences serve as an important guide for future open source projects navigating similar challenges at the intersection of technology and community.