One concern I have is API key management.

.env files or injecting secrets at startup via a secret manager still risks leaking keys.

I vaguely recall an implementation that substitutes secret placeholders with real secrets only during outgoing calls to approved domains which sounds better. However, you're still trusting an agent on your machine with command execution.

Funny enough ooenclaw is based on Pi.

I’m kind of curious what you do with it. I feel like the real value is integrating it with everything but then even if it’s nanoclaw or simpler majority of the worthy things are on the unsafe side.

Would love to hear your experience as I’m planning to do the exactly same.

The most interesting thing for me is that I built an extension for Pi that has it recognize when it does not know how to do something I am asking and it then attempts to make its own extension and/or skill to enable whatever that functionality is. Best example there is I just told it to make a todo list for me, and so it made a skill that uses a local file to track todos and follow up on them. I instructed it to make an LLM call to find the best suggested follow up timing to remind me.

So... the real value so far is I find it fun? It isn't the "life changing need to go make a tweet!!" level for me.

Pi is great so it's sad to see that it only gained momentum because some trash tool like openclaw uses it.

I think developer of pi and openclaw are friends, not sure if it matters but also Pi has its own small following. I agree with you it’s such an elegant piece of project with an awesome clean architecture. (Also see: oh my pi)

The real lesson is if you ignore security and data disasters agentic AI is easier than anyone expected.

Yeah it does seem a little fragile. Still battling with working out why it pegs CPU at 100% permanently on a VPS I tried using. Literally just from installing the base