Microsoft advises isolating OpenClaw evaluations from workstations

Microsoft’s 19 February security guidance warned against evaluating OpenClaw on an ordinary personal or enterprise workstation. Its analysis focuses on a runtime that can ingest untrusted text, download executable skills and act using assigned credentials. An attack on the instructions and an attack on downloaded code can reach the same execution environment.

For organisations that decide to test the runtime, Microsoft recommends a dedicated virtual machine or separate system, non-privileged credentials and non-sensitive data. It also calls for monitoring and a rebuild plan. These are precautions described for the evaluation context, not a report that every OpenClaw installation has been compromised. Isolation limits the consequences of a mistake while the organisation examines what the agent can actually do.