3-李学庆.pdf

1、别别让让你你的的“龙龙虾虾”成成为为最最大大“内内鬼鬼”姓名 李学庆职位 桃盾AI创始人ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026C CE EO O&创创始始人人：李李学学庆庆安安全全大大赛赛评评委委1 10 00 0+企企业业安安全全顾顾问问+中中国国领领军军C CS SO O社社区区发发起起人人WWE EB B3 3.0 0安安全全经经理理京京东东安安全全第第一一人人C CS SO OC CI IS SO OC CS SO O&C CT

2、 TO O算算力力总总经经理理ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026重重新新认认识识OpenClaw：从从工工具具到到“数数字字员员工工”从对话助手到行动助手，一场生产力的革命自自主主执执行行任任务务形形成成任任务务闭闭环环释释放放团团队队效效能能（文件操作、浏览器控制、脚本执行、数据采集）ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2

3、026ClawCon2026ClawCon2026数数字字员员工工”的的六六大大核核心心功功能能AI驱驱动动的的智智能能劳劳动动力力 重重塑塑生生产产力力边边界界ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026O Op pe en nC Cl la a

4、ww的的技技术术栈栈架架构构ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026“O Op pe en nC Cl la aww安安全全风风险险全全景景图图ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCo

5、n2026ClawCon2026ClawCon2026ClawCon2026ClawCon20261.核核心心代代码码泄泄露露Agent被指令或提示词注入，将项目代码库打包发送至外部服务器，造成核心资产流失。2.内内部部数数据据外外泄泄恶意操控Agent将客户信息、财务报表等敏感数据上传至公开网盘，严重违反合规要求。3.权权限限滥滥用用与与提提权权利用过高权限创建新管理员账户，实现对系统的持久化控制，威胁基础设施安全。4.供供应应链链投投毒毒从不可信渠道安装恶意插件，窃取Agent所有权限与操作记录，污染业务生态环境。5.业业务务流流程程破破坏坏篡改Agent执行逻辑，导致错误订单自动执行，造

6、成直接财务损失与业务混乱。6.伪伪造造身身份份与与欺欺诈诈模拟高管发送钓鱼邮件或以他人身份操作内部系统，破坏组织信任并实施诈骗。“龙龙虾虾”变变“内内鬼鬼”：六六大大典典型型内内鬼鬼风风险险ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026Axios遭供应链投毒!ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCon2026ClawCo