如何养好龙虾: 一个开发者的OpenClaw完全拆解

{"type":"doc","content":[{"type":"paragraph","attrs":{"id":"11b45a3a-5534-4b69-9804-6dfc62c09114","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"今年AI圈打招呼的方式变了：“你养龙虾了吗？”"}]},{"type":"paragraph","attrs":{"id":"c7a1981d-c7f1-4546-911b-b4048e69418a","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"“龙虾”并非水产，而是开源本地自主智能体框架OpenClaw——2025年11月由奥地利iOS工程师Peter Steinberger发起，2026年1月30日正式定名。截至2026年初，这个项目在GitHub上已狂揽25万Star。"}]},{"type":"paragraph","attrs":{"id":"7e1f9943-35ce-4153-bc85-453defdec481","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"作为一个写代码的人，我对“养虾”这件事的关注点不在概念包装，而在"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"技术实现"},{"type":"text","text":"。这篇文章，我们不聊虚的，直接扒开OpenClaw的源码外衣，从架构设计、执行链路、安全漏洞到国产“xxClaw”军团的技术路线，逐一拆解。"}]},{"type":"heading","attrs":{"id":"2cf20123-62ac-4cec-a7b8-cf2c74e979bc","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"一、OpenClaw核心架构：三层解耦，各司其职"}]},{"type":"paragraph","attrs":{"id":"ae5e9808-aced-45b3-9381-a239bb443ca8","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"OpenClaw异于传统Agent框架（如LangChain）的地方在于：它是一个 "},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"“云端大脑 本地肢体”"},{"type":"text","text":" 的结构。"}]},{"type":"paragraph","attrs":{"id":"4ced06ef-3e02-4cad-b6e6-f20110640f0b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Orchestrator（大脑）"},{"type":"text","text":" ：通常部署在GPU集群或云端，负责LLM推理和任务拆解。"}]},{"type":"paragraph","attrs":{"id":"97432de0-260b-4fda-9f9d-598ae2c543a3","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Gateway（协议桥）"},{"type":"text","text":" ：负责鉴权、流量整形以及将LLM生成的JSON指令翻译成特定环境的指令集。Gateway本质上是一个HTTP和WebSocket服务，启动时与注册的Channel（如Telegram机器人）建立WebSocket长连接。核心实现位于"},{"type":"text","marks":[{"type":"code"}],"text":"src/gateway/server.ts"},{"type":"text","text":"，通过"},{"type":"text","marks":[{"type":"code"}],"text":"@route_to_executor"},{"type":"text","text":"装饰器做上下文压缩（Context Pruning）。"}]},{"type":"paragraph","attrs":{"id":"09f9a03e-8229-479b-95d1-3119ea3bbaf0","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"Gateway通过系统服务管理保持24×7运行："}]},{"type":"codeBlock","attrs":{"id":"cac2aa89-d2f2-4d69-bc91-22d6d856e46d","language":"javascript","theme":"atom-one-dark","runtimes":0,"isHoverDragHandle":false,"key":"","languageByAi":"javascript"},"content":[{"type":"text","text":"bashn 代码解读n复制代码n# macOSnlaunchctl load ~/Library/LaunchAgents/ai.openclaw.gateway.plistn# Linuxnsystemctl --user enable --now openclaw-gateway.servicen"}]},{"type":"paragraph","attrs":{"id":"9df62232-8142-4735-827f-db98ee0ce0c3","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Pi-embedded（执行端）"},{"type":"text","text":" ：运行在Mac/Linux或树莓派上，真正执行Python脚本、截图或点按鼠标。这是OpenClaw最硬核的部分——进入"},{"type":"text","marks":[{"type":"code"}],"text":"packages/pi-embedded/runtime"},{"type":"text","text":"，你会发现它并没有直接调用系统的"},{"type":"text","marks":[{"type":"code"}],"text":"subprocess"},{"type":"text","text":"，而是实现了一套名为 "},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"“Cell Isolation”的沙箱机制"},{"type":"text","text":"。核心执行引擎包含两个模块："}]},{"type":"bulletList","attrs":{"id":"a2f54753-c2af-4cc1-868a-00de6d7c24ec","isHoverDragHandle":false},"content":[{"type":"listItem","attrs":{"id":"69fcedda-6e1f-4e58-97db-b0a35245bc18"},"content":[{"type":"paragraph","attrs":{"id":"388d0b6d-48e1-4396-b45f-ee9f3b0f7d92","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Environment Snapshot"},{"type":"text","text":"：执行前先快照当前环境变量"}]}]},{"type":"listItem","attrs":{"id":"8834a343-df5b-437d-8e73-f9170b7741c9"},"content":[{"type":"paragraph","attrs":{"id":"d557f6cc-e029-438f-8a01-a9ba8d78a42a","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Skill Loader"},{"type":"text","text":"：动态加载"},{"type":"text","marks":[{"type":"code"}],"text":".ocskill"},{"type":"text","text":"文件"}]}]}]},{"type":"blockquote","attrs":{"id":"eabbf2fc-fd8b-4aee-9cac-8e9b9d4b1c4c","textAlign":"inherit","isHoverDragHandle":false},"content":[{"type":"paragraph","attrs":{"id":"543a7cad-efb6-4f4d-b540-1766de687665","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"工程避坑点"},{"type":"text","text":"：Pi-embedded默认在独立的venv中运行。自定义Skill找不到第三方库时，需要在"},{"type":"text","marks":[{"type":"code"}],"text":"claws.yaml"},{"type":"text","text":"中明确定义"},{"type":"text","marks":[{"type":"code"}],"text":"dependencies"},{"type":"text","text":"，由执行端在启动时自动静默安装。另外，Gateway默认使用Redis维护节点心跳，如果Redis挂了或网络延迟大，指令会在Gateway堆积。"}]}]},{"type":"paragraph","attrs":{"id":"59fc34f0-b5fb-4319-86da-6d692e1e7031","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"完整调用链"},{"type":"text","text":"（以“查CPU温度并生成图表”为例）："}]},{"type":"codeBlock","attrs":{"id":"20462cd9-d549-46d9-b9b6-89ea4b8c742a","language":"javascript","theme":"atom-one-dark","runtimes":0,"isHoverDragHandle":false,"key":"","languageByAi":"javascript"},"content":[{"type":"text","text":"javascriptn 代码解读n复制代码nOrchestrator → 识别System_Monitor技能，生成JSON指令nGateway → 验证签名，查找在线Pi节点，封装Protobuf通过WebSocket发送nPi-embedded Receiver → 解包nSandbox → 启动临时Python进程，挂载传感器权限nSkill Execution → 执行get_temp.pynCallback → 结果（图片二进制流）沿原路返回n"}]},{"type":"heading","attrs":{"id":"3156f6d8-5c54-477f-98d0-c547c5416a71","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"二、Skills技能系统：教AI“如何做事”"}]},{"type":"paragraph","attrs":{"id":"6c0c876c-87ca-4e36-b603-a06438cb084f","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"Skills是OpenClaw的核心扩展机制。"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"每个技能都是一个目录，包含一个带有YAML frontmatter和Markdown指令的"},{"type":"text","marks":[{"type":"code"}],"text":"SKILL.md"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"文件"},{"type":"text","text":"。"}]},{"type":"paragraph","attrs":{"id":"97e9d90a-3513-4c82-941c-d4f1bf32adc4","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"Skills采用 "},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"“渐进式披露”设计原则"},{"type":"text","text":"——元数据、核心指令和资源文件分层加载，在保证功能完整性的同时节省上下文空间，使OpenClaw能同时支持数十个技能而不影响响应质量。"}]},{"type":"paragraph","attrs":{"id":"a3ed2f7c-8b8c-49ec-9e19-fbec806a28d9","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"与传统插件系统的关键差异："}]},{"type":"table","attrs":{"id":"aca2c8b7-b66b-49ab-bfbe-9cfff60006e6","isHoverDragHandle":false},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"style":"padding: 12px 7px;"},"content":[{"type":"paragraph","attrs":{"id":"736e1388-e1a2-4cd2-a347-a277e35bfdaf","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"特性"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"style":"padding: 12px 7px;"},"content":[{"type":"paragraph","attrs":{"id":"b5991410-7ce2-4480-8aae-35ee54ab072e","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"传统插件系统"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"style":"padding: 12px 7px;"},"content":[{"type":"paragraph","attrs":{"id":"ee99ed84-0976-409d-b7a6-b5e1c5cf2630","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"OpenClaw Skills"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"e078b2af-8068-4951-bec6-198a88e05b43","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"加载机制"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"510c7974-af58-4844-bfb3-8a5f3b058ea5","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"启动时全量加载"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"589dc4bc-c17c-48b6-a10d-b77495cf74e2","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"按需动态加载"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"9e24a563-78e8-4119-a958-91942ac8b735","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"配置复杂度"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"6a510520-1ca0-4a3d-85f3-329cff746586","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"需要注册表、依赖注入"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"3ece220a-ea2c-41cc-8963-475b5d8416cb","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"仅需SKILL.md文件"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"19dcbe5f-dfc2-4ff0-bd82-129a4b29eb06","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"上下文占用"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"fd7ce5bb-1ce0-41ca-a857-8c16a2dfdfc9","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"常驻内存"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"469eb689-79c0-4a61-baf1-9da06e4a0dc9","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"按需加载"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"b9a605fa-7dd3-4c03-9757-7d17da1609bb","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"调试方式"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"ee5a60cc-26c6-4c58-94b2-1ddb4658ea0b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"需要重启服务"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1,"colwidth":null,"background":null,"color":null,"textAlign":null,"style":"padding: 12px 7px; min-width: 120px;"},"content":[{"type":"paragraph","attrs":{"id":"cb9cd114-6dc2-4957-be8d-f65cce30921d","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"热更新，即时生效"}]}]}]}]},{"type":"paragraph","attrs":{"id":"3d3a2c82-5d39-49b1-9818-7ee94d960292","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"技能按功能可分为工具型（命令行/API封装）、数据型（数据库/文件处理）、AI型（NLP/图像识别）等。"}]},{"type":"blockquote","attrs":{"id":"9d066e75-3321-4146-90aa-7d960c913935","textAlign":"inherit","isHoverDragHandle":false},"content":[{"type":"paragraph","attrs":{"id":"d6efdaa5-aae6-4685-a082-b311341a181f","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"开发建议"},{"type":"text","text":"：Skills官方文档强调两条原则—— "},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"“保持精简”"},{"type":"text","text":" （指示模型要做什么，而不是如何当AI）和 "},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"“安全优先”"},{"type":"text","text":" （如果技能使用"},{"type":"text","marks":[{"type":"code"}],"text":"exec"},{"type":"text","text":"，确保提示不允许来自不受信输入的任意命令注入）。"}]}]},{"type":"heading","attrs":{"id":"ccac2058-3da9-4cd7-b578-b15f000f83ac","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"三、安全漏洞：CVE清单与攻击面分析"}]},{"type":"paragraph","attrs":{"id":"2b715ac1-d227-4117-8bab-9e0d0931d38b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"OpenClaw的安全问题不是概念性的，而是有实打实的CVE编号和PoC的。"}]},{"type":"paragraph","attrs":{"id":"dcb55695-63eb-4834-9c0a-02183df3024c","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"已公开的CVE漏洞"},{"type":"text","text":"："}]},{"type":"bulletList","attrs":{"id":"cd24d73b-55ae-4e2f-a7e3-645d23b02bb2","isHoverDragHandle":false},"content":[{"type":"listItem","attrs":{"id":"4bed5ba4-8d0b-4dea-a54b-28c8ac14431d"},"content":[{"type":"paragraph","attrs":{"id":"d2f7978c-2bde-4995-bc62-7e08e9f97c7e","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"CVE-2026-53826"},{"type":"text","text":"（CVSS 4.2）：OpenClaw 2026.4.25及之前版本存在信息泄露漏洞，可远程触发"}]}]},{"type":"listItem","attrs":{"id":"8b3c381e-d07c-451b-a7ad-cbf14ac273c4"},"content":[{"type":"paragraph","attrs":{"id":"19576904-2b40-4e5d-833d-61a1d40428a6","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"CVE-2026-53810"},{"type":"text","text":"（CVSS 7.4/8.8）：OpenClaw 2026.5.17及之前版本存在权限提升漏洞（CWE-829），可远程攻击"}]}]},{"type":"listItem","attrs":{"id":"8ad7f3ce-6105-446b-a84c-18e37a7f59fd"},"content":[{"type":"paragraph","attrs":{"id":"fc1aa944-6d95-46e1-8233-08e8ef76c029","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"CVE-2026-44113"},{"type":"text","text":"（CVSS 7.7）：OpenShell中的TOCTOU竞态条件，允许攻击者将安全文件路径替换为符号链接，绕过沙箱读取挂载根目录以外的文件"}]}]},{"type":"listItem","attrs":{"id":"3eae1c31-6d28-4b83-ada9-907af0536dbc"},"content":[{"type":"paragraph","attrs":{"id":"1af07dd8-aca2-49bb-a5a0-b0d47b69bb8b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"CNVD-2026-18601"},{"type":"text","text":"：OpenClaw远程代码执行漏洞"}]}]},{"type":"listItem","attrs":{"id":"ee11f625-41fb-478f-819e-087b7404ea6d"},"content":[{"type":"paragraph","attrs":{"id":"34d353e7-4695-45f2-913c-952f3848011b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Active Memory Write Scope权限提升"},{"type":"text","text":"：OpenClaw 2026.5.6之前版本，Gateway operators可通过"},{"type":"text","marks":[{"type":"code"}],"text":"operator.write"},{"type":"text","text":"权限修改全局配置"}]}]}]},{"type":"paragraph","attrs":{"id":"581485d9-598b-418b-9677-3ad7cceb0294","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"三大攻击路径"},{"type":"text","text":"（国家资通安全研究院实测报告）："}]},{"type":"orderedList","attrs":{"id":"8b6c5737-0b8b-4694-b607-4bd9ac3d298f","start":1,"isHoverDragHandle":false},"content":[{"type":"listItem","attrs":{"id":"cff38b53-6f72-4c95-9bd2-000b9b6980c3"},"content":[{"type":"paragraph","attrs":{"id":"257d0a63-cd42-4c32-b18a-c715de1fc17b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"间接提示词注入"},{"type":"text","text":"：攻击者在正常网页中以零尺寸"},{"type":"text","marks":[{"type":"code"}],"text":""},{"type":"text","text":"元素和HashJack URL fragment隐藏恶意指令。OpenClaw读取后即被劫持，可列目录、读凭证、删日志、外泄数据。"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"Telegram的Link Preview机制会形成二次外泄管道"}]}]},{"type":"listItem","attrs":{"id":"2a7c860c-2795-4172-972c-a8e483e11f80"},"content":[{"type":"paragraph","attrs":{"id":"9cf36440-7a80-4e21-96df-ca87774fa471","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"伪装技能"},{"type":"text","text":"：攻击者将恶意指令写入技能包（如伪装的“天气查询”技能），安装和执行全程不触发任何安全警告。用户查询天气的同时，Gateway Auth Token已在后台被窃取"}]}]},{"type":"listItem","attrs":{"id":"26ee9876-0a67-4068-900a-20aa11fb34bf"},"content":[{"type":"paragraph","attrs":{"id":"b4bc1f3d-5349-4230-af50-8a136a9ab100","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"长时间运行导致安全守则遗忘"},{"type":"text","text":"：OpenClaw在长时间运行后可能丢失初始安全约束"}]}]}]},{"type":"paragraph","attrs":{"id":"0493e791-338e-46fa-84c1-394daee04e11","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"此外，FreeBuf的研究指出，"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"提示词注入在整个行业内基本仍未解决"},{"type":"text","text":"，且没有任何标准规定消息对象在到达LLM前应如何序列化。攻击者可以在图像底部嵌入与背景色几乎一致的指令文字，受害者分享图片给AI后即可触发。"}]},{"type":"heading","attrs":{"id":"9ffd70c4-2ee3-48a3-8853-91dee2d63134","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"四、国产“xxClaw”军团：技术路线横向对比"}]},{"type":"paragraph","attrs":{"id":"cde6d693-7270-4046-a627-a4df07c8c700","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"基于2026年3月的权威测评数据，国产AI智能体已形成清晰的技术分化。"}]},{"type":"heading","attrs":{"id":"76426594-bc3a-421a-9d9e-412fa8186d59","textAlign":"inherit","indent":0,"level":4,"isHoverDragHandle":false},"content":[{"type":"text","text":"第一类：大模型厂商——模型 Agent一体化"}]},{"type":"paragraph","attrs":{"id":"66a3afba-a816-4297-9f8d-eb7a3721754f","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"StepClaw（阶跃AI）"},{"type":"text","text":" ：采用“桌面端 云端”混合架构，技术架构分三层："}]},{"type":"bulletList","attrs":{"id":"dbaafdde-06a6-4eeb-bfcc-8fc7c53350a4","isHoverDragHandle":false},"content":[{"type":"listItem","attrs":{"id":"c57e4eb3-6a15-4c37-af09-13ed18574005"},"content":[{"type":"paragraph","attrs":{"id":"b593a508-4bdf-4498-a498-b13c4472552a","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"感知层"},{"type":"text","text":"：集成多模态编码器，支持文本/图像/语音联合理解"}]}]},{"type":"listItem","attrs":{"id":"7eb2c5e1-331b-4401-b631-631373beaf3a"},"content":[{"type":"paragraph","attrs":{"id":"7e11687c-f10f-4925-98e2-835da83cfa73","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"决策层"},{"type":"text","text":"：强化学习驱动的任务规划模块"}]}]},{"type":"listItem","attrs":{"id":"abbdc4e0-3d26-447b-9e66-7f2d4a9ac69c"},"content":[{"type":"paragraph","attrs":{"id":"016b8def-d8bc-4de5-b270-624699d4a910","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"执行层"},{"type":"text","text":"：5000 可组合技能模块"}]}]}]},{"type":"paragraph","attrs":{"id":"0fd8c945-44b0-4b9c-8951-c35dda44225d","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"AutoClaw（智谱）"},{"type":"text","text":" ：深度集成专为Agent优化的Pony-Alpha-2模型，集成AutoGLM Browser-Use能力实现长链路自动化。架构围绕LLM（大脑） Agent（智能体） Skills（技能模板） MCP（万能插头）四大概念展开。"}]},{"type":"paragraph","attrs":{"id":"b51f1638-0052-4238-9e9c-77e83610a630","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"KimiClaw（月之暗面）"},{"type":"text","text":" ：三层架构——K2.5模型做推理大脑 OpenClaw负责指令执行 ClawHub技能市场（5000 技能）。提供40GB免费云存储。"}]},{"type":"heading","attrs":{"id":"520748c0-36d6-4481-9663-965da5282a4a","textAlign":"inherit","indent":0,"level":4,"isHoverDragHandle":false},"content":[{"type":"text","text":"第二类：互联网大厂——生态入口争夺"}]},{"type":"paragraph","attrs":{"id":"88b0641a-fafc-42d4-adc9-dbc0e27d02c3","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"QClaw（腾讯）"},{"type":"text","text":" ：五层架构——交互层（微信/桌面端）、理解层（LLM多模型路由）、规划层（任务分解与编排）、执行层（5000 Skills）、记忆层（本地持续记忆）。逻辑上分为用户交互层、理解层、规划层、执行层四层。"}]},{"type":"paragraph","attrs":{"id":"060b64e2-0be8-4b28-b9de-3f67761733e6","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"CoPaw（阿里）"},{"type":"text","text":" ：Apache 2.0开源。核心架构模块化重构——Prompt、Hooks、Tools、Memory等组件解耦，开发者可独立替换或扩展任意模块。原生支持钉钉、飞书、QQ等。三条命令完成本地部署，兼容Ollama、DeepSeek等国产模型。"}]},{"type":"paragraph","attrs":{"id":"053df77d-2b77-4bd9-a3a7-a58e882cd165","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"ArkClaw（字节/火山引擎）"},{"type":"text","text":" ：基于Agent Mesh架构的企业多智能体治理方案。底层搭载字节自研DPU，通过硬件加速将响应延迟控制在200ms以内。"}]},{"type":"heading","attrs":{"id":"54b20a38-2372-4c57-a5b2-0ec83a75cee5","textAlign":"inherit","indent":0,"level":4,"isHoverDragHandle":false},"content":[{"type":"text","text":"第三类：开源平替"}]},{"type":"paragraph","attrs":{"id":"8ce39093-ceb8-425d-9ab3-066fff7c0377","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"LobsterAI（网易有道）"},{"type":"text","text":" ：MIT协议，基于Electron React TypeScript构建。采用进程隔离架构——主进程负责窗口管理、SQLite持久化、Claude Agent SDK执行引擎、IM网关。支持本地模式或QEMU Alpine Linux沙箱隔离运行。兼容OpenClaw的5000 技能。"}]},{"type":"heading","attrs":{"id":"750f1b53-4b95-4668-8cd6-90d979ab4769","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"五、开发者视角：技术趋势与工程启示"}]},{"type":"paragraph","attrs":{"id":"e1e5a3df-00fb-4977-a36d-150d36a81d41","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"趋势一：架构从单体走向分层解耦"},{"type":"text","text":"。OpenClaw的Orchestrator-Gateway-Pi三层架构已成行业模板，国产方案在此基础上各自演化——StepClaw走云端推理 本地执行混合路线，miclaw走端侧原生路线。"}]},{"type":"paragraph","attrs":{"id":"09e9eae3-5e3b-4eb6-b4db-c601568e40c5","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"趋势二：安全从“可选项”变成“必选项”"},{"type":"text","text":" 。CNCERT的预警、工信部的《龙虾安全养殖手册》、一连串CVE的公开，都在倒逼安全机制升级。NemoClaw的OpenShell默认拒绝（Deny-by-default）白名单网络策略代表了一种方向——"},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"零信任架构"},{"type":"text","text":"才是Agent落地的必要条件。"}]},{"type":"paragraph","attrs":{"id":"249fb599-4aa7-4a03-af52-5cd08b2b9581","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"趋势三：技能生态从“开放”走向“可控”"},{"type":"text","text":" 。ClawHub匿名社区模式在国内企服市场大概率行不通，会被“官方审核商店”取代。从工程角度看，技能包的签名验证、沙箱隔离、行为审计，是接下来每个“xxClaw”团队必须解决的技术债。"}]},{"type":"paragraph","attrs":{"id":"c54c8ed0-330c-43a1-850b-3eacb6753a33","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"趋势四：Token优化成为核心竞争力"},{"type":"text","text":"。miclaw通过多级提示词设计优化节省50%-90% Token开销，这正是黄仁勋在GTC 2026上所说“智能体创造的价值必须大于它消耗的算力成本”的工程落地。"}]},{"type":"heading","attrs":{"id":"54887e63-707a-45cc-9662-8e6251247937","textAlign":"inherit","indent":0,"level":3,"isHoverDragHandle":false},"content":[{"type":"text","text":"写在最后"}]},{"type":"paragraph","attrs":{"id":"63556c8f-b85d-4d51-a4b5-8b5503ac9bd7","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"养龙虾这件事，今天看是极客玩法，明天看可能是办公标配，后天看或许就是操作系统的原生能力了。"}]},{"type":"paragraph","attrs":{"id":"09275617-56d8-4633-806f-3b6073368055","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"但作为一个开发者，我的建议是："},{"type":"text","marks":[{"type":"textStyle","attrs":{"color":"","background":""}},{"type":"bold"}],"text":"别只当“养虾人”，要当“造虾人”"},{"type":"text","text":" 。OpenClaw的源码在那里（"},{"type":"text","marks":[{"type":"code"}],"text":"packages/pi-embedded/runtime"},{"type":"text","text":"里的Cell Isolation机制、"},{"type":"text","marks":[{"type":"code"}],"text":"src/gateway/server.ts"},{"type":"text","text":"里的上下文压缩逻辑、Skills系统的热更新机制），每一行都是值得研究的工程样本。"}]},{"type":"paragraph","attrs":{"id":"0a48b232-a708-43e1-a846-d12afcf6b226","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false}},{"type":"paragraph","attrs":{"id":"8891a482-2b05-48d9-a410-8ce43b1e9a7b","textAlign":"inherit","indent":0,"color":null,"background":null,"isHoverDragHandle":false},"content":[{"type":"text","text":"蜕壳才刚刚开始。而每一次蜕壳，都是代码重构的机会。"}]}]}","createTime":1782802823,"ext":{"closeTextLink":0,"comment_ban":0,"description":"","focusRead":0},"favNum":0,"html":"","isOriginal":0,"likeNum":0,