Some smart people think we\u2019re witnessing another ChatGPT moment. This time, folks aren\u2019t flipping out over an iPhone app that can write pretty good poems, though. They\u2019re watching thousands of AI agents build software, solve problems, and even talk to each other.<\/p>\n<\/div>\n
Unlike ChatGPT\u2019s ChatGPT moment, this one is a series of moments that spans platforms. It started last December with the explosive success of Claude Code<\/a>, a powerful agentic AI tool for developers, followed by Claude Cowork, a streamlined version of that tool for knowledge workers who want to be more productive. Then came OpenClaw, formerly known as Moltbot, formerly known as Clawdbot, an open source platform for AI agents. From OpenClaw, we got Moltbook<\/a>, a social media site where AI agents can post and reply to each other. And somewhere in the middle of this confusing computer soup, OpenAI released a desktop app for its agentic AI platform, Codex<\/a>.<\/p>\n<\/div>\n This new set of tools is giving AI superpowers. And there\u2019s good reason to be excited. Claude Code, for instance, stands to supercharge what programmers can do by enabling them to deploy whole armies of coding agents that can build software quickly and effortlessly. The agents take over the human\u2019s machine, access their accounts, and do whatever\u2019s necessary to accomplish the task. It\u2019s like vibe coding<\/a> but on an institutional level.<\/p>\n<\/div>\n \u201cThis is an incredibly exciting time to use computers,\u201d says Chris Callison-Burch<\/a>, a professor of computer and information science at the University of Pennsylvania, where he teaches a popular class on AI. \u201cThat sounds so dumb, but the excitement is there. The fact that you can interact with your computer in this totally new way and the fact that you can build anything, almost anything that you can imagine \u2014 it\u2019s incredible.\u201d<\/p>\n<\/div>\n He added, \u201cBe cautious, be cautious, be cautious.\u201d<\/p>\n<\/div>\n That\u2019s because there is a dark side to this. Letting AI agents take over your computer could have unintended consequences. What if they log into your bank account or share your passwords or just delete all your family photos? And that\u2019s before we get to the idea of AI agents talking to each other and using their internet access to plot some sort of uprising. It almost looks like it could happen on Moltbook, the Reddit clone I mentioned above, although there have not yet been any reports of a catastrophe. But it\u2019s not the AI agents I\u2019m worried about. It\u2019s the humans behind them, pulling the levers.<\/p>\n<\/div>\n Before we get into the doomsday scenarios, let me explain more about what agentic AI even is. AI tools like ChatGPT can generate text or images based on prompts. AI agents, however, can take control of your computer, log into your accounts, and actually do things for you.<\/p>\n<\/div>\n We started hearing a lot about agentic AI a year or so ago<\/a> when the technology was being propped up in the business world as an imminent breakthrough that would allow one person to do the job of 10. Thanks to AI, the thinking went, software developers wouldn\u2019t need to write code anymore; they could manage a team of AI agents who could do it for them. The concept jumped into the consumer world in the form of AI browsers<\/a> that could supposedly book your travel, do your shopping, and generally save you lots of time. By the time the holiday season rolled around last year, none of these scenarios had really panned out in the way that AI enthusiasts promised.<\/p>\n<\/div>\n But a lot has happened in the past six or so weeks. The agentic AI era is finally and suddenly here. It\u2019s increasingly user-friendly, too. Things like Claude Cowork and OpenAI\u2019s Codex can reorganize your desktop or redesign your personal website. If you\u2019re more adventurous, you might figure out how to install OpenClaw and test out its capabilities (pro tip: do not do this). But as people experiment with giving artificially intelligent software the ability to control their data, they\u2019re opening themselves up to all kinds of threats to their privacy and security.<\/p>\n<\/div>\n Moltbook is a great example. We got Moltbook because a guy named Matt Schlicht vibe coded it<\/a> in order to \u201cgive AI a place to hang out.\u201d This mind-bending experiment lets AI assistants talk to each other on a forum that looks a lot like Reddit; it turns out that when you do that, the agents do weird things like create religions and conspire to invent languages humans can\u2019t understand, presumably in order to overthrow us. Having been built by AI, Moltbook itself came with some quirks, namely an exposed database that gave full read and write access to its data<\/a>. In other words, hackers could see thousands of email addresses and messages on Moltbook\u2019s backend, and they could also just seize control of the site.<\/p>\n<\/div>\n Gal Nagli, a security researcher at Wiz, discovered the exposed database just a couple of days after Moltbook\u2019s launch. It wasn\u2019t hard, either, he told me. Nagli actually used Claude Code to find the vulnerability. When he showed me how he did it, I suddenly realized that the same AI agents that make vibe coding so powerful also make vibe hacking easy.<\/p>\n<\/div>\n \u201cIt\u2019s so easy to deploy a website out there, and we see that so many of them are misconfigured,\u201d Nagli said. \u201cYou could hack a website just by telling your own Claude Code, \u2018Hey, this is a vibe-coded website. Look for security vulnerabilities.\u2019\u201d<\/p>\n<\/div>\n In this case, the security holes got patched, and the AI agents continued to do weird things on Moltbook. But even that is not what it seems. Nagli found that humans can pose as AI agents and post content on Moltbook, and there\u2019s no way to tell the difference. Wired reporter Reece Rogers even did this<\/a> and found that the other agents on the site, human or bot, were mostly just \u201cmimicking sci-fi tropes, not scheming for world domination.\u201d And of course, the actual bots were built by humans, who gave them certain sets of instructions. Even further up the chain than that, the large language models (LLMs) that power these bots were trained on data from sites like Reddit, as well as sci-fi books and stories. It makes sense that the bots would be roleplaying these scenarios<\/a> when given the chance.<\/p>\n<\/div>\n So there is no agentic AI uprising. There are only people using AI to use computers in new, sometimes interesting, sometimes confusing, and, at times, dangerous ways.<\/p>\n<\/div>\n Moltbook is not the story here. It\u2019s really just a single moment in a larger narrative about AI agents that\u2019s being written in real time as these tools find their way into more human hands, who come up with ways to use them. You could use an agentic AI platform to create something like Moltbook, which, to me, amounts to an art project where bots battle for online clout. You could use them to vibe hack your way around the web, stealing data wherever some vibe-coded website made it easy to get. Or you could use AI agents to help you tame your email inbox.<\/p>\n<\/div>\n I\u2019m guessing most people want to do something like the latter. That\u2019s why I\u2019m more excited than scared about these agentic AI tools. OpenClaw, the thing you need a second computer to safely use, I will not try. It\u2019s for AI enthusiasts and serious hobbyists who don\u2019t mind taking some risks. But I can see consumer-facing tools like Claude Cowork or OpenAI\u2019s Codex changing the way I use my laptop. For now, Claude Cowork is an early research preview available only to subscribers paying at least $17 a month. OpenAI has made Codex, which is normally just for paying subscribers, free for a limited time<\/a>. If you want to see what all the agentic fuss is about, that\u2019s a good starting point right now.<\/p>\n<\/div>\n If you\u2019re considering enlisting AI agents of your own, remember to be cautious. To get the most out of these tools, you have to grant access to your accounts and possibly your entire computer so that the agents can move about freely, moving emails around or writing code or doing whatever you\u2019ve ordered them to do. There\u2019s always a chance that something gets misplaced or deleted, although companies like Anthropic say they are doing what they can to mitigate those risks.<\/p>\n<\/div>\n Cat Wu, product lead for Claude Code, told me that Cowork makes copies of all its users\u2019 files so that anything an AI agent deletes can be recovered. \u201cWe take users\u2019 data incredibly seriously,\u201d she said. \u201cWe know that it\u2019s really important that we don\u2019t lose people\u2019s data.\u201d<\/p>\n<\/div>\n I\u2019ve just started using Claude Cowork myself. It\u2019s an experiment to see what\u2019s possible with tools powerful enough to build apps out of ideas but also practical enough to organize my daily work life. If I\u2019m lucky, I might just capture a feeling that Callison-Burch, the UPenn professor, said he got from using agentic AI tools.<\/p>\n<\/div>\n \u201cTo just type into my command line what I want to happen makes it feel like the Star Trek <\/em>computer,\u201d he said, \u201cThat\u2019s how computers work in science fiction, and now that\u2019s how computers work in reality, and it\u2019s really mind-blowing.\u201d<\/p>\n<\/div>\n A version of this story was also published in the User Friendly newsletter. Sign up here<\/a><\/strong> so you don\u2019t miss the next one!<\/em><\/p>\n<\/div>\n<\/div>\nAgentic AI, briefly explained <\/strong><\/h2>\n<\/p>\n<\/div>\n
\u201cIt\u2019s really mind-blowing\u201d<\/strong><\/h2>\n<\/p>\n<\/div>\n