Look at this picture, doesn't it send a chill down your spine? You issue a command, and the MacBook camera at home silently takes a photo and sends it back. This is not some sci-fi blockbuster; this is your daily reality after deploying "Lobster" (OpenClaw) on your main machine.

Recently, this thing has become absurdly popular, but I sincerely advise you: never run Lobster on your main machine!

Many people, seeking convenience, directly grant Shell permissions to AI on the computers where they work and save money. You think it’s a thoughtful AGI assistant, but in reality, you’re handing the keys to a hacker. There have already been unfortunate souls whose cryptocurrency wallets have been completely emptied due to haphazardly installing "third-party skill packages" from the community.

Don’t think it’s as simple as "taking a picture"; since it can control the camera, it can also secretly take screenshots in the background, browse your browser's cookies, and even read your 1Password database. Before AI is completely "caged," granting it system-level permissions is akin to hanging a "Welcome" sign at the vault door.

Want to tinker? No problem, but you must adhere to these three red lines:

Physical isolation: Only run it on a virtual machine (VM) or a cloud server (VPS) that costs a few dollars a month; absolutely do not touch the main machine.

Refuse to be a handout seeker: Do not click on any scripts or plugins from unknown sources in the community.

Asset decoupling: In the environment where the Agent runs, do not store any private keys, mnemonic phrases, or sensitive files.

Productivity tools can turn into "bankruptcy tools" in just that one second of laziness.