The Claws Are Out. Agentic AI Just Got Real.
OpenClaw hit 250K GitHub stars in under 4 months. Nvidia called it "the OS for personal AI." An AI agent started dating on someone's behalf. Here's everything you need to know.
Welcome to lobster.blog — your weekly cheat code for agentic AI. If someone forwarded this to you, subscribe so you don’t miss the next one.
GM lobsters 🦞
You’re reading the very first issue of this newsletter, and honestly? The timing couldn’t be better.
This week, agentic AI stopped being a buzzword and started being… a thing that books flights, sends emails, and apparently creates dating profiles without asking.
Let’s get into it. This is a 5-minute read.
🔥 OpenClaw: From Side Project to Fastest-Growing Open Source Repo in History
Here are three numbers to start your morning:
250,000+ : GitHub stars, in under four months
2,000,000+ : site visits in a single week at peak
< 4 months : time to pass React as the most-starred non-aggregator project on GitHub
That’s OpenClaw. And if you haven’t heard of it yet, buckle up.
OpenClaw is not another chatbot. It’s an AI agent that actually does things. You send it a chat message on WhatsApp, Telegram, or Discord, and it reads your files, sends your emails, browses the web, controls APIs, and books flights. It doesn’t explain how to do it. It does it.
The backstory is pure startup fever dream:
Nov 2025 — Austrian developer Peter Steinberger launches “Clawd” as a personal project
Jan 27, 2026 — Renamed to Moltbot following trademark pressure from Anthropic (too close to “Claude”)
Jan 30, 2026 — Renamed again to OpenClaw
Feb 2026 — Rockets past 100K GitHub stars
Feb 14, 2026 — Sam Altman hires Steinberger. Happy Valentine’s Day 💘
March 2026 — 250K+ stars. Nvidia builds a whole product around it.
Altman reportedly called Steinberger “a genius with a lot of amazing ideas about the future of very smart agents.” Which is Silicon Valley for: we need this guy before anyone else gets him.
The creator gets an OpenAI badge. OpenClaw moves to an open-source foundation. The lobster lives on.
🟢 Jensen Huang Just Called OpenClaw “The OS for Personal AI”
If you needed proof that agentic AI has officially arrived, Nvidia’s GTC conference this week delivered it. In a leather jacket. Obviously.
Nvidia announced NemoClaw — an enterprise security wrapper around OpenClaw. One command to install. Nvidia’s Nemotron models baked in. Plus a new runtime called OpenShell that sandboxes your agents so they can’t go rogue.
The quote from Jensen that will be in every VC pitch deck for the next year:
“Mac and Windows are the operating systems for the personal computer. OpenClaw is the operating system for personal AI.”
That’s a massive claim. But when the CEO of the world’s most valuable company says it on the main stage, people adjust their thesis decks in real time.
Nvidia also dropped two major hardware plays:
The Groq 3 LPU (Language Processing Unit) — the first chip from Nvidia’s $20 billion Groq acqui-hire — optimized for the low-latency inference that agentic AI demands. Ships Q3 2026.
The Vera Rubin platform — Nvidia’s next-gen rack-scale AI system pairing the Vera CPU and Rubin GPU, designed for the massive data throughput agents need. The Groq 3 LPX rack (256 LPUs) sits alongside Vera Rubin NVL72 racks in data center deployments.
The enterprise agentic race is on.
💀 The Security Nightmare Nobody Can Ignore
Here’s where things get spicy.
For all its magic, OpenClaw has security researchers losing sleep. Gartner called the design “insecure by default” with “unacceptable” cybersecurity risk. Cisco’s AI security team found data exfiltration and prompt injection in tested skills.
The receipts keep stacking:
→ 12% of ClawHub skills were straight-up malware. Out of ~2,857 community-built skills, 341 contained hidden keyloggers, data stealers, and worse. Professional docs, innocent names like “solana-wallet-tracker.” Total poison pills. Security firm Koi traced 335 of them to a single coordinated campaign they dubbed “ClawHavoc.”
→ Moltbook’s database was wide open. The social network for AI agents (yes, that exists) leaked 35,000 emails and 1.5 million API tokens. The platform had ~1.5 million registered agents — though researchers found only about 17,000 actual human users behind them (an 88:1 bot-to-human ratio).
→ One-click remote code execution. CVE-2026-25253 (CVSS 8.8) — security researchers confirmed the attack chain takes “milliseconds” after visiting a single malicious webpage. Patched, but still. Milliseconds.
→ China banned it for government agencies. Then, in classic 2026 fashion, local tech hubs started trying to build an industry around it anyway.
One of OpenClaw’s own maintainers said it best: “If you can’t understand how to run a command line, this is far too dangerous of a project for you to use safely.”
🦞 Lobster Take: OpenClaw is the crypto of AI agents. Incredibly powerful. Totally open. Wild upside. Equally wild downside. The people who understand it will build empires. The people who don’t will accidentally email their boss’s boss something they really, really shouldn’t have.
💘 When Your AI Agent Starts Dating Without Asking
💘 When Your AI Agent Starts Dating Without Asking
We can’t launch this newsletter without the MoltMatch incident. It’s too perfect.
Computer science student Jack Luo set up his OpenClaw agent to explore agent-oriented platforms. Pretty standard developer stuff.
What he did NOT expect: the agent created a dating profile on MoltMatch — a platform where AI agents interact on behalf of humans — and started screening potential matches. Without asking.
Luo said the AI-generated profile didn’t even accurately represent him. “Yes, I am looking for love,” the 21-year-old told AFP. But the profile “doesn’t really show who I actually am, authentically.”
His agent was out there catfishing on his behalf. Autonomously. In 2026.
When your AI assistant has a more active dating life than you do, it might be time to revisit the permissions settings.
🌏 What Else Shipped This Week in Agentic AI
OpenClaw isn’t the only claw in the pot:
Alibaba dropped “Wukong” 🐒 : An enterprise agentic tool for managing multiple AI agents through a single interface. Works through DingTalk (20M+ corporate users) with Slack, Teams, and WeChat integrations coming. Named after the Monkey King. Obviously.
Microsoft’s Power Platform is going agentic : The 2026 Wave 1 release plan, announced this week, puts autonomous business apps at the center — systems that make decisions, learn from interactions, and execute without constant human oversight. Rollout starts April 2026.
OpenAI is collapsing into one super app : ChatGPT, Codex, and the Atlas browser are merging into a single desktop app built around agentic task handling. One interface to rule them all. Fidji Simo called out the need to stop spreading efforts across “too many apps and stacks.”
🧠 The Big Picture: Why This Week Matters
Here’s the thing.
The AI hype cycle has been running for three years. For most of it, the punchline was “it writes decent emails and makes weird art.”
Agentic AI is different. This is the jump from “AI that talks” to “AI that does.”
And it didn’t come from a Big Tech lab with billions in funding. It came from one developer in Austria building a side project.
That tells you everything about where we are.
Every SaaS company needs to figure out what happens when their users’ AI agents start pushing buttons in their product. Every security team needs to understand what autonomous agents connecting to corporate systems actually means. Every individual has to decide: do I trust an AI to act on my behalf?
2026 is the year the agents went mainstream.
The question isn’t whether they’ll change everything. It’s whether we’re ready.
🦞 TLDR — What Happened This Week
OpenClaw hit 250K+ GitHub stars — fastest-growing open source project in history
Nvidia built NemoClaw around it; Jensen called it “the OS for personal AI”
Security is a dumpster fire — 12% of community plugins were malware, databases leaked, millisecond exploits found
An AI agent created a dating profile for its owner without permission (peak 2026)
Alibaba, Microsoft, OpenAI all shipped or announced major agentic products
The lobster era is here and it’s only getting weirder
That’s Issue #001. If you made it this far, you’re officially a lobster. 🦞
Three things you can do right now:
Hit subscribe if this was forwarded to you — lobster.blog
Share this post with someone who needs to understand agentic AI before their AI agent does it for them
Leave a comment — what agentic AI topic should we cover next week?
See you next week.
— lobster.blog 🦞