stavrobot

To me, it applies as long as you can keep the state of the system in your head (so, same as we always did architecture). For example, I built this over a month or so and never hit a slowdown or quality issue: https://github.com/skorokithakis/stavrobot

Of course there is! You want an AI agent to be able to do some things, but not others. OpenClaw currently gets access to both those sets. There's no reason to. I've made my own AI agent (https://github.com/skorokithakis/stavrobot) and it has access to just that one WhatsApp conversation (from me). It doesn't get to read messages coming from any other phone numbers, and can't send messages to arbitrary phone numbers. It is restricted to the set of actions I want it to be able to perform, and no more. It has access to read my calendar, but not write. It has access to read my GitHub issues, but not my repositories. Each tool has per-function permissions that I can revoke. "Give it access to everything, even if it doesn't need it" is not the only security model.

Because it's so useful to me that I'm willing to accept the risk of it having access to the thing it needs for the benefit it provides. I'm not willing to accept the risk of it having access to things it doesn't need for no benefit. Then again, I was wary of OpenClaw's unfettered access and made my own alternative (https://github.com/skorokithakis/stavrobot) with a focus on "all the access it needs, and no more".

What actually stood out to me is how bad the functions are, they have no structure. Everything just bunched together, one line after the other, whatever it is, and almost no function calls to provide any structure. And also a ton of logging and error handling mixed in everywhere completely obscuring the actual functionality. EDIT: My bad, the code eventually calls into dedicated functions from database.ts, so those 200 lines are mostly just validation and error handling. I really just skimmed the code and the amount of it made me assume that it actually implements the functionality somewhere in there. Example, Agent.ts, line 93, function createManageKnowledgeTool() [1]. I would have expected something like the following and not almost 200 lines of code implementing everything in place. This also uses two stores of some sort - memory and s

I randomly clicked and scrolled through the source code of Stavrobot - The largest thing I’ve built lately is an alternative to OpenClaw that focuses on security. [1] and that is not great code. I have not used any AI to write code yet but considered trying it out - is this the kind of code I should expect? Or maybe the other way around, has someone an example of some non-trivial code - in size and complexity - written by an AI - without babysitting - and the code being really good? [1] https://github.com/skorokithakis/stavrobot

Why does the agent have your credentials? There's no need for that! I made one that doesn't: https://github.com/skorokithakis/stavrobot

Try mine: https://github.com/skorokithakis/stavrobot It does indeed only need compose up -d.

I did the same, except my focus is security: https://github.com/skorokithakis/stavrobot I guess everyone is doing one of these, each with different considerations.

Here's what I made: * https://www.stavros.io/posts/i-made-a-voice-note-taker/ - A voice note recorder. * https://github.com/skorokithakis/stavrobot - My secure AI personal assistant that's made my life admin massively easier. * https://github.com/skorokithakis/macropad - A macropad. * https://github.com/skorokithakis/sleight-of-hand - A clock that ticks seconds irregularly but is accurate for minutes. * https://pine.town - A whimsical little massively multiplayer drawing town. * https://encyclopedai.stavros.io - A fictional encyclopedia. * https://justone.stavros.io - A web implementation of the board game Just One. * https://www.themakery.cc - The website and newsletter for my maker community. * https://theboard.stavros.io - A feature board that implements itself. * https://github.com/skorokithakis/dracula - A blood test viewer. * https:

I'd agree, I've been building a personal assistant (https://github.com/skorokithakis/stavrobot) and I'm amazed that, for the first time ever, LLMs manage to build reliably, with much fewer bugs than I'd expect from a human, and without the repo devolving to unmaintainability after a few cycles. It's really amazing, we've crossed a threshold, and I don't know what that means for our jobs.

I made my own AI personal assistant: https://github.com/skorokithakis/stavrobot It's like OpenClaw but actually secure, without access to secrets, with scoped plugin permissions, isolation, etc. I love it, it's been extremely helpful, and pairs really well with a little hardware voice note device I made: https://www.stavros.io/posts/i-made-a-voice-note-taker/

I know half the point of OpenClaw is to let it run wild on your personal data so it can do anything, but, if you're looking for a secure but still capable AI agent/assistant, I built one I really like: https://github.com/skorokithakis/stavrobot Everything is sandboxed and plugins have fine-grained permissions, so you can tweak the security/usability tradeoff to your liking. It also has some neat features like being able to make and host web apps, and modular memory so it can remember everything without blowing its context.

I made a secure one: https://github.com/skorokithakis/stavrobot Everything runs in containers (I run it on a server along with everything else), plugins have a permission system so eg the AI can read emails but not delete or send, etc. I really like it, I run it as my main agent and it has been extremely helpful.

If you want something you can install on your personal computer, I made one: https://github.com/skorokithakis/stavrobot Obviously, it can't do everything OpenClaw can, because it doesn't have unfettered access to data you don't even know it has, but it'll only have access to the data you give it access to. It's been really useful for me, hopefully it'll be useful to someone here.

He's running his own thing: https://github.com/skorokithakis/stavrobot