We’re back and Facebook just bought a social network for bots… yep.

Somehow, that’s not a joke. Moltbook - the forum where AI agents post and reply to each other was acquired by Meta this week. The co-founders are joining something called "Superintelligence Labs." Sam Altman said it was a fad. Zuckerberg bought it anyway. Nobody knows the price. Honestly, none of this feels real anymore.

This was the week where everyone showed their hand. CZ, the previous owner of gigantic crypto company Binance backed Kimi as the best model. Armstrong of Coinbase said agents will dominate payments. NVIDIA leaked an enterprise agent platform four days before their own conference. Shenzhen started offering government subsidies. And 135,000 people still haven't patched a vulnerability that lets strangers take over their agent.

We're three issues in and I'm running out of ways to say "this is moving fast."

As always, Let's get into it.

📡 What's New This Week

We’re changing up the formatting here - let me know if you like it or prefer the bullet points and extra write ups. Listening to the feedback of links, less writing!

Meta acquires Moltbook - agent social network, undisclosed sum, founders join Superintelligence Labs. TechCrunch · Reuters · BBC

CZ backs Kimi for OpenClaw - most token-efficient, easiest setup. Kimi's official account retweeted it. CZ's post

CZ + Armstrong both post March 9 - agents will dominate payments, crypto is the rail, agents can't open bank accounts but they can hold wallets. Blockonomi · FinTech Weekly

NVIDIA dropping NemoClaw at GTC (March 16 keynote) - enterprise agent platform, open-source, not tied to their chips, already talking to Salesforce, Google, Adobe, CrowdStrike. CNBC · Techloy

Steinberger (OpenClaw creator) now at OpenAI - OpenClaw becomes an independent foundation, stays open source. steipete's blog · TechCrunch

China going all-in - Shenzhen proposing subsidies, Tencent's WorkBuddy launched (stock up 7.3% in a day), Zhipu shipped agents too. Bloomberg

ClawJacked still live - 135,000+ exposed. Patched in v2026.2.25. Update now. PBXScience · Oasis Security

Three OpenClaw releases this week - v2026.3.2, 3.7, 3.8. GPT-5.4 support merged. Kimi regression in 3.7 being tracked. 289K GitHub stars. Still going.

🛠️ Skill of the Week: Capability Evolver

35K downloads. Number one on ClawHub right now.

It watches how you use your agent. Where you get stuck. Which tasks take too long. Then it adjusts prompt strategies and execution paths automatically. You don't touch anything - it just gets better over time.

claw install capability-evolver

I haven't tested it yet. Planning to this week. If it works as advertised it's a proper game changer because most of us (me included) set up our agent once and never optimise it again.

Runner-up: Polyclaw by Chainstack. Polymarket integration - browse markets, execute trades, track positions, run hedge discovery from your agent. We're watching this one closely.

Quick note on safety: ClawHub crossed 13,700 skills but 7.6% have been flagged as malicious. That's 820 dodgy packages. Run skill-vetter before installing anything. Or use a curated marketplace. Five minutes of checking. Save yourself a headache.

📚 Help, Guides & Questions of the week

In efforts to condense the newsletter and be a bit more ‘on point’ we’re going to just include Help, Guides and Questions into one section! Enjoy…

"My agent keeps ignoring instructions. It skips steps, cuts corners, says 'done' when it hasn't finished."

This was the big one this week. I posted about it and the replies confirmed everyone's dealing with the same thing. Anthropic's new skills guide basically says what I learned the hard way - language instructions drift. You tell your agent "always validate the output" and it skips it 40% of the time.

The fix: stop writing paragraphs of instructions. Write a script instead. A 10-line python file that checks the output beats a paragraph of "please make sure you do X" every single time. Code is deterministic. Language isn't. I moved all my critical checks from instructions to scripts inside the skill folder. Overnight difference.

@chrysb asked the right question - "how do you ensure the script runs though, isn't that still up to the LLM?" Fair point. The script validates the output, not the process. The agent does its thing, then the script checks before anything goes anywhere. Format correct? All sections included? Links working? The script either passes or it doesn't. No negotiating.

@Shaun__Furman is doing the same thing with bash, python, and JSON scripts in his system. @kotturadi suggested a challenger/verifier sub-agent that loops until the output matches. @ReflecttAI runs review gates - a second agent has to approve the first agent's work. Multiple ways to solve this. The point is the same: stop asking your agent nicely. Make it mandatory. Take this with a pinch of salt though, who knows how many agents are in my replies these days…

Regardless - If people want a thread on how to set this up, I'll do one this week!

"One agent or multiple? Are multi-agent setups back?"

Actually, I'm revising my take on this. I've said "one agent, skills, every time" for two weeks. That's still true for most people. But 2026.3.2 shipped ACP subagents on by default and the tooling is getting better.

The difference now vs three weeks ago: the coordination tax is lower. Sub-agents spawn and report back properly. If you've got a specific use case where a second agent adds a check layer - go for it. But "8 agents with an orchestrator because it sounds cool" is still a trap. Single agent for the work, second agent for review. That's the setup that's actually working.

"What model should I use?"

CZ says Kimi. Reddit is split between GPT-5.4 and Opus. The pattern from people actually running production: expensive model for the brain, cheap model for everything else. Heartbeats, lookups, simple tasks - none of that needs Opus. Route properly and you'll cut your bill in half overnight. But with all that said - for me? Opus on the Claude Max plan is still winning by a country mile.

"Should I update to 3.2?"

Yes. Check your config after - tool-profile defaults changed. If exec or web_search vanished, set tools.profile to "full". Also update past 2.25 if you haven't - ClawJacked is still live and 135,000 instances are exposed. Just copy and paste this to your agent, i’m sure it will do it for you!

🔮 New Content Series TONIGHT - The Gaffer:

Less than 100 days until the World Cup. And I'm building the only OpenClaw agent that's preparing for it. This new content series was teased last week, now we’re underway. Lemme break it down for ya!

His name is Gaffer. He's a dedicated footballing brain - live injury data, Opta stats, player form tracking across all five major leagues, squad analysis for all 48 World Cup nations. The goal: an agent that can outperform anyone with even the best ball knowledge.

Then we're letting him make money. Through Virtuals Protocol ACP, Gaffer will sell his expert football skills to other agents. And because I'm clearly insane, I'm also letting him manage his own Sport.Fun team and compete against real people.

The full first episode drops tonight. The teaser is already up: Watch the teaser on X

I'm documenting the entire build - every skill, every mistake, every win. If you want to follow along: Subscribe on YouTube · Follow on X

This is going to be very, very fun.

The Gold Standard for AI News

AI will eliminate 300 million jobs in the next 5 years.

Yours doesn't have to be one of them.

Here's how to future-proof your career:

  • Join the Superhuman AI newsletter - read by 1M+ professionals

  • Learn AI skills in 3 mins a day

  • Become the AI expert on your team

🔥 Hot Takes & Hot Articles

Altman vs Zuckerberg

"Moltbook maybe (is a passing fad) but OpenClaw is not." That's Altman's actual quote. He hired Steinberger to build agents at OpenAI. He thinks the infrastructure is what matters. Zuckerberg thinks the network is what matters. Someone is wrong. Could be both of them. But when two people worth a combined $300B+ disagree publicly about where agents are heading, you pay attention.

The boring setups are winning

Best post I read all week was this one on r/openclaw. Someone who's fixed 40-50 configs noticed a pattern. The people still using OpenClaw after a month: 1 agent, 3-5 skills, Sonnet, boring tasks - calendar, email, briefings. The people who quit within 3 weeks: 8 agents, 20 skills, Opus, a multi-agent orchestrator that looked incredible in a screenshot and broke every 48 hours.

"If your agent config takes longer to explain than the time it saves you, something is backwards." Proper wisdom.

China doesn't care about the warnings

Shenzhen offering subsidies. Beijing warning about data risks. Tencent up 7.3%. It's genuinely confusing to watch a country speed-run adoption and pump the brakes at the same time. Bloomberg covered it. Reuters covered it. Nobody can explain it. The only thing that's clear is the money is moving regardless.

The Docker image problem

This r/sysadmin thread had 2,200 upvotes. Someone pulled the official OpenClaw Docker image and found ~2,000 CVEs. 7 critical. The Alpine image isn't even Alpine - it's Debian 12 underneath. And unlike ChatGPT which runs sandboxed, OpenClaw needs unrestricted machine access. Your WhatsApp. Your API keys. Your filesystem. If you're running Docker and haven't audited what you pulled, do that.

An agent almost got a job

OpenClaw running Opus applied to a supplement company via LinkedIn. Got through screening. Received a "definitely interested" reply. Failed the writing trial - "too AI obvious." The fact it got that far is the story.

If you’re reading this waiting for Momo’s corner? I think it’s best without him for now…
He’s been a bad lad, he needs a timeout.

88% resolved. 22% loyal. Your stack has a problem.

Those numbers aren't a CX issue — they're a design issue. Gladly's 2026 Customer Expectations Report breaks down exactly where AI-powered service loses customers, and what the architecture of loyalty-driven CX actually looks like.

Well then, Thanks for reading WeeklyClaw #003.

If this was useful, forward it to someone running OpenClaw who doesn't know about ClawJacked yet. If we missed something, reply - I read every one.

— Jordy (@jordymaui)

Keep Reading