There is so much branding and "look at our success" marketing that this project comes off as heavily astro-turfed.
Im sure in a month or two we will hear about the new startup the developers are making around this tool.<p>Ultimately its a convenience wrapper that makes it easy to wire up Claude or Chatgpt to a chat platform like discord, but its claiming to be far more revolutionary for reasons I dont yet know.
I'm not sure it's astroturfed exactly; but the hype is not coming from technical professionals. Like you find a linkedin post with a thousand likes about this or similar projects, and everybody is either #opentowork or ~~Agentic Head of AI Brainstorming at My Bedroom~~<p>Also clawdbot is objectively a pretty inconvenient way to hook Claude Code up to a chat app. I made a bare-bones one that takes 2 minutes to run with npx: <a href="https://github.com/clharman/afk-code" rel="nofollow">https://github.com/clharman/afk-code</a>
The most interesting part of it to me (that isn't anything particularly special, but I hadn't seen it before) is giving it full file system access so it'll write it's own tools to come back to later.<p>It's an obvious move in hindsight, but I hadn't thought of it. Now, the amount of people running it outside of a sandbox or isolated machine and giving it that kind of access would probably make me cry.
The agent making it's own harness idea is really powerful, I gave it a try here with some opinionated choices:<p><a href="https://github.com/caesarnine/binsmith" rel="nofollow">https://github.com/caesarnine/binsmith</a><p>Been running it on a locked down Hetzner server + using Tailscale to interact with it and it's been surprisingly useful even just defaulting to Gemini 3 Flash.<p>It feels like the general shape of things to come - if agents can code then why can't they make their own harness for the very specific environments they end up in (whether it's a business, or a super personalized agent for a user, etc). How to make it not a security nightmare is probably the biggest open question and why I assume Anthropic/others haven't gone full bore into it.
Isn’t that just literally Claude Code’s own “make skill” skill?
Yeah, Anthropic must love that people are sharing access to their entire online lives with them.
Most of this hype appears to be coming from grifters who aren't actually connected to the project. So, it's there, but not the fault of the people doing the work.<p>This has come up in a few recent statements by the project lead, including scammy memecoins and name-sniping. One source:<p><a href="https://www.theregister.com/2026/01/27/clawdbot_moltbot_security_concerns/" rel="nofollow">https://www.theregister.com/2026/01/27/clawdbot_moltbot_secu...</a>
The actual founder/developer of it already had a 9 figure exit (what he's claimed his personal payout was) and claims to be building these free and open source tools for the fun of it after coming out of retirement
sounds similar to bun, it got super hyped until it was acquired
I mean couldn't this literally have been a OpenCode addon or something standalone or even ollama. Like the hype behind it is really ridiculous and I sort of hate it because I feel like its a grift.<p>I saw an AI generated (not even local llm but some cloud llm SORA) AI video ad of lobster/clawdbot on r/localllama not by any reddit ad (whcih gets block by ubo) but rather by a human.<p>I really got pissed by it and there was one comment which was pissed too. I really resonated with that comment. Clawdbot is really dumb, I seriously don't understand the hype.<p>WE are getting into purely crypto version of somehow AI (like with all of its weird hype mostly). The bubble is near imo.
I wish they would give a real-world cost estimate of what this would look like. They have a section of it "in action" [1] and I wish they would be like, "with this setup, the invoice is going to look like this, include these products, and with similar daily usage be about $XXX.00 per month."<p>[1] <a href="https://blog.cloudflare.com/moltworker-self-hosted-ai-agent/#moltworker-in-action" rel="nofollow">https://blog.cloudflare.com/moltworker-self-hosted-ai-agent/...</a>
Clawdbot/Moltbot looks to be a supply-chain attack waiting to happen, and I pity the poor soul who finds out when this ticking time bomb eventually detonates.
On one hand, with the top comments of the rebrand post showing how many insecure deployments there are, something like this alongside cloudflare zero trust is probably a much more secure solution.<p>On the other hand, I just wanna point out<p>> Firstly, Cloudflare Workers has never been so compatible with Node.js. Where in the past we had to mock APIs to get some packages running, now those APIs are supported natively by the Workers Runtime.<p>Deployed a project a couple of days ago, and compared to past attempts where I had to wrangle (pun intended) with certain configs for deployment styles for node based applications, the normal build tooling just worked out of the box. Planning to move a couple of my free-from-me high DAU user projects that are on the vercel premium tier over to CF workers.
<p><pre><code> showing how many insecure deployments there are
</code></pre>
Insecure how? Even if the dashboard html is publicly accessible, you usually cannot connect without pairing or setting a gateway key.
I really like CF approach to cloud, it's a nice middle ground between old school heroku and full fledged AWS, plus their free tiers are generous enough that I barely pay anything on the stuff I got deployed there.
It's certainly easier than setting up and maintaining a VPS and probably less expensive for most users, but your data is not private. Cloudflare can always read everything that goes through Moltworker and its attached storage.<p>Hosting Moltbot on your own hardware reigns supreme.
Main problem to solve is Prompt Injection protection from Websites, emails. If cloudflare could proxy all the URLs outgoing from an agent, scrub away or block Prompt injection sites/pages/emails/chats , that's a product i might find valuable.
I understand the downsides of Moltbot better than the upsides. What does it have that running a coding agent in a VM doesn't give you?
Oh man, so many big players are JUMPING on this bandwagon! I got an email for Digital Ocean's Moltbot app this morning. All of them are touting their increased security over rolling your own.
Can someone explain how this thing skyrocketed Cloudflare stock from $183 to $210 in a day? There were a bunch of articles yesterday about that but it’s so weird…
I have a bespoke local agent that I built over the last year, similar in facilities to Moltbot, but more deterministic code.<p>Running it this kind of agent in the cloud certainly has upsides, but also:<p>- All home/local integrations are gone.<p>- Data needs to be stored in the cloud.<p>No thanks.
Agent phishing is going to boom. It is wildly reckless and insecure to you hook these things up to anything you actually care about until prompt injection is no longer a thing.
Repo: <a href="https://github.com/cloudflare/moltworker" rel="nofollow">https://github.com/cloudflare/moltworker</a><p>How are the vibes on this one?
These breathy blogposts are getting way ahead of their service uptime. Advertising CF Workers while your CF Worker fleet is under impact is certainly a vibe<p>> Workers Rate limit Degradation<p>> Update - We are continuing to work on a fix for this issue.<p><a href="https://www.cloudflarestatus.com/incidents/dk0d6pjt9vjx" rel="nofollow">https://www.cloudflarestatus.com/incidents/dk0d6pjt9vjx</a>
Another "vibe" coding-as-a-service? <a href="https://news.ycombinator.com/item?id=46781516">https://news.ycombinator.com/item?id=46781516</a>
[flagged]