How to install OpenClaw on an Amazon Cloud Computer
The video is a comprehensive tutorial and review of 'Claudebot,' an open-source AI agent that runs on a local machine or VPS, can take autonomous actions on a computer, and communicates through messaging apps like Slack. The creator walks through setting up Claudebot on a free AWS EC2 instance, connecting it to Slack, and demonstrates use cases like daily news aggregation, app building, and animation generation. He concludes with serious security warnings about prompt injection and the risks of giving an AI agent broad system access.
Summary
The video opens with the creator describing Claudebot as a viral sensation in the AI community on X (formerly Twitter), distinguishing it from traditional AI chatbots by its ability to take real-world actions on behalf of users rather than just giving advice. He outlines five key differentiating features: it runs locally with access to files and applications, it can be controlled remotely via messaging apps like Slack or Telegram, it has full system terminal access, it has persistent memory across sessions, and it is self-improving through installable skills.
The creator then addresses costs, clarifying that Claudebot itself is free and open-source, but users will incur API fees from services like Anthropic or OpenAI depending on which models they use. He notes that a Claude Max subscription at $200/month can cap those costs. He outlines three installation options: on your existing personal computer (easiest but riskiest), on a dedicated machine like a Mac Mini (popular trend), or on a cloud VPS.
The bulk of the video is a step-by-step tutorial for setting up Claudebot on a free-tier Amazon AWS EC2 instance running Ubuntu with 8GB of RAM. He walks through creating the instance, connecting via terminal, running the Claudebot install command from claud.bot, and going through the onboarding wizard. He selects Anthropic's Claude Opus 4.5 as the model and configures Slack as the communication channel by creating a Slack app, configuring it via a JSON manifest, and linking the bot and app OAuth tokens.
Once connected, the creator demonstrates several live use cases. He performs a 'brain dump' of personal information so Claudebot can build a persistent memory profile and suggest relevant automations. He then asks Claudebot to set up a daily AI news aggregator, which it configures as a cron job running at 8am Pacific, delivering curated headlines from sources like The Verge. He also asks it to install Claude Code for building apps, which it does in seconds. He attempts to install Remotion for video animation generation, encounters some setup friction due to using the wrong install command, but eventually gets it working through a Cloudflare tunnel and receives a basic animation of his website FutureTools.io.
The creator closes with strong security warnings, disclosing he shut down his EC2 instance after filming due to concerns about exposed security vulnerabilities. He warns specifically about prompt injection attacks, where malicious instructions on a visited website could hijack the bot's actions. He advises running Claudebot on a dedicated machine, using separate phone numbers and email addresses for integrations, and treating it like a new untrusted contractor in terms of access granted. He frames Claudebot as a landmark 'iPhone moment' for AI — a cultural shift where AI moves from giving advice to autonomously executing tasks.
Key Insights
- The creator argues that Claudebot's persistent memory — remembering preferences, projects, and communication style across all sessions — is the single most impressive feature that sets it apart from other AI tools.
- The creator claims that Claudebot represents an 'iPhone moment' for AI, describing it as a cultural phenomenon within the AI community where people broadly recognize for the first time that AI can autonomously do things on their behalf rather than just give advice.
- The creator warns that prompt injection is a real and non-theoretical threat with Claudebot — a malicious website could embed instructions in its text to redirect the bot to leak private information or take harmful actions.
- The creator demonstrates that Claudebot can self-diagnose and fix its own configuration errors in real time, as when it detected a misconfigured Slack API token and provided step-by-step corrective instructions without being asked.
- The creator asserts that Claudebot itself is completely free and open-source, but real-world usage costs are driven entirely by the external APIs it calls — such as Anthropic or OpenAI — meaning heavy users of top-tier models like Claude Opus 4.5 could accumulate significant API charges.
Topics
Full transcript available for MurmurCast members
Sign Up to Access