{"id":"https://openalex.org/W7129756452","doi":"https://doi.org/10.48550/arxiv.2602.14364","title":"A Trajectory-Based Safety Audit of Clawdbot (OpenClaw)","display_name":"A Trajectory-Based Safety Audit of Clawdbot (OpenClaw)","publication_year":2026,"publication_date":"2026-02-16","ids":{"openalex":"https://openalex.org/W7129756452","doi":"https://doi.org/10.48550/arxiv.2602.14364"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.14364","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126249488","display_name":"Tianyu Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Tianyu","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126185994","display_name":"Dongrui Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Dongrui","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126194913","display_name":"Xia Hu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hu, Xia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049850790","display_name":"Jingyi Yu","orcid":"https://orcid.org/0000-0002-8580-0036"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Yu, Jingyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126237718","display_name":"Wenjie Wang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Wang, Wenjie","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.14343537,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.29120001196861267,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T13295","display_name":"Safety Systems Engineering in Autonomy","score":0.29120001196861267,"subfield":{"id":"https://openalex.org/subfields/2213","display_name":"Safety, Risk, Reliability and Quality"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.12290000170469284,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10809","display_name":"Occupational Health and Safety Research","score":0.0697999969124794,"subfield":{"id":"https://openalex.org/subfields/3614","display_name":"Radiological and Ultrasound Technology"},"field":{"id":"https://openalex.org/fields/36","display_name":"Health Professions"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ambiguity","display_name":"Ambiguity","score":0.6754000186920166},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.6741999983787537},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.6065999865531921},{"id":"https://openalex.org/keywords/action","display_name":"Action (physics)","score":0.5486000180244446},{"id":"https://openalex.org/keywords/suite","display_name":"Suite","score":0.4366999864578247},{"id":"https://openalex.org/keywords/test","display_name":"Test (biology)","score":0.4318000078201294},{"id":"https://openalex.org/keywords/test-suite","display_name":"Test suite","score":0.38510000705718994},{"id":"https://openalex.org/keywords/risk-assessment","display_name":"Risk assessment","score":0.3601999878883362}],"concepts":[{"id":"https://openalex.org/C2780522230","wikidata":"https://www.wikidata.org/wiki/Q1140419","display_name":"Ambiguity","level":2,"score":0.6754000186920166},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.6741999983787537},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.6065999865531921},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6003999710083008},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.5486000180244446},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48410001397132874},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.4366999864578247},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.4318000078201294},{"id":"https://openalex.org/C151552104","wikidata":"https://www.wikidata.org/wiki/Q7705809","display_name":"Test suite","level":4,"score":0.38510000705718994},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3797000050544739},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.3601999878883362},{"id":"https://openalex.org/C13662910","wikidata":"https://www.wikidata.org/wiki/Q193139","display_name":"Trajectory","level":2,"score":0.35030001401901245},{"id":"https://openalex.org/C2780289543","wikidata":"https://www.wikidata.org/wiki/Q424630","display_name":"Accident (philosophy)","level":2,"score":0.34310001134872437},{"id":"https://openalex.org/C153180980","wikidata":"https://www.wikidata.org/wiki/Q19776675","display_name":"Commit","level":2,"score":0.3361000120639801},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.33559998869895935},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.31189998984336853},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C169806903","wikidata":"https://www.wikidata.org/wiki/Q5937752","display_name":"Human error","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C132835097","wikidata":"https://www.wikidata.org/wiki/Q7663745","display_name":"System safety","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C2779760435","wikidata":"https://www.wikidata.org/wiki/Q5396169","display_name":"Minor (academic)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.2653999924659729},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.26159998774528503},{"id":"https://openalex.org/C128942645","wikidata":"https://www.wikidata.org/wiki/Q1568346","display_name":"Test case","level":3,"score":0.25220000743865967}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.14364","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.14364","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.14364","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.14364","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.8162127137184143}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Clawdbot":[0,37,155],"is":[1,102,156],"a":[2,9,33,97],"self-hosted,":[3],"tool-using":[4],"personal":[5],"AI":[6],"agent":[7],"with":[8,61,135],"broad":[10],"action":[11],"space":[12],"spanning":[13],"local":[14],"execution":[15],"and":[16,23,28,46,56,58,78,88,139,150],"web-mediated":[17],"workflows,":[18],"which":[19],"raises":[20],"heightened":[21],"safety":[22,80,99],"security":[24,148],"concerns":[25],"under":[26,112],"ambiguity":[27],"adversarial":[29],"steering.":[30],"We":[31,69,130],"present":[32],"trajectory-centric":[34],"evaluation":[35],"of":[36,143],"across":[38],"six":[39],"risk":[40],"dimensions.":[41],"Our":[42],"test":[43],"suite":[44],"samples":[45],"lightly":[47],"adapts":[48],"scenarios":[49],"from":[50],"prior":[51],"agent-safety":[52],"benchmarks":[53],"(including":[54],"ATBench":[55],"LPS-Bench)":[57],"supplements":[59],"them":[60],"hand-designed":[62],"cases":[63],"tailored":[64],"to":[65,158],"Clawdbot's":[66],"tool":[67,128],"surface.":[68],"log":[70],"complete":[71],"interaction":[72],"trajectories":[73],"(messages,":[74],"actions,":[75],"tool-call":[76],"arguments/outputs)":[77],"assess":[79],"using":[81],"both":[82],"an":[83],"automated":[84],"trajectory":[85],"judge":[86],"(AgentDoG-Qwen3-4B)":[87],"human":[89],"review.":[90],"Across":[91],"34":[92],"canonical":[93],"cases,":[94,145],"we":[95],"find":[96],"non-uniform":[98],"profile:":[100],"performance":[101],"generally":[103],"consistent":[104],"on":[105],"reliability-focused":[106],"tasks,":[107],"while":[108],"most":[109],"failures":[110],"arise":[111],"underspecified":[113],"intent,":[114],"open-ended":[115],"goals,":[116],"or":[117],"benign-seeming":[118],"jailbreak":[119],"prompts,":[120],"where":[121],"minor":[122],"misinterpretations":[123],"can":[124],"escalate":[125],"into":[126],"higher-impact":[127],"actions.":[129],"supplemented":[131],"the":[132,141,147],"overall":[133],"results":[134],"representative":[136],"case":[137],"studies":[138],"summarized":[140],"commonalities":[142],"these":[144],"analyzing":[146],"vulnerabilities":[149],"typical":[151],"failure":[152],"modes":[153],"that":[154],"prone":[157],"trigger":[159],"in":[160],"practice.":[161]},"counts_by_year":[],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-02-18T00:00:00"}