TL;DR: OpenClaw v2026.3.22 — released March 23 — is the biggest update the platform has ever shipped. The headline feature is ClawHub: a plugin marketplace that works like an App Store for AI agents. Add GPT-5.4 support, the new /btw side-question command, SSH sandboxes, and 45 total features, and this release moves OpenClaw from "interesting tool" to "platform." Here's everything solopreneurs need to know — including the security risks that got worse with this update.
Release at a Glance
- Version: OpenClaw v2026.3.22 (released March 23, 2026)
- Headline feature: ClawHub — plugin/skill marketplace now built into OpenClaw
- New models: GPT-5.4, GPT-5.4-mini, GPT-5.4-nano, MiniMax M2.7
- New command: /btw — ask side questions without polluting session context
- New infrastructure: SSH sandboxes + OpenShell for remote execution
- New search: Exa, Tavily, Firecrawl integration
- Cross-platform: Install skills from Claude, Codex, and Cursor marketplaces
- Breaking changes: 13 (environment variable names changed — check your config)
ClawHub: The App Store for AI Agents
The single most important thing in this release isn't a feature — it's a platform shift.
Before 3.22, when you wanted to add a new capability to OpenClaw, you had to find and install npm packages manually. It worked, but it felt like installing software in 2005 — you needed to know where to look, trust the source, and manage updates yourself.
ClawHub changes that. It's now the default installation path for plugins and skills. When you search for a new capability inside OpenClaw, it checks ClawHub first. You get a curated directory of plugins with metadata, search and install flows built right into the app, and automatic update tracking.
The Apple App Store analogy isn't an exaggeration. When the App Store launched in 2008, it didn't just add apps to the iPhone — it turned the iPhone into a platform that anyone could build for. ClawHub does the same thing for OpenClaw. Developers can now publish skills to a marketplace that millions of users will discover. Users can find capabilities without digging through GitHub repos. And OpenClaw becomes something more than a tool — it becomes infrastructure.
Within the first 24 hours of the release, developers were already listing automations for email workflows, Etsy shop management, content scheduling, and competitive research. The marketplace is young, but the direction is clear.
The 7 Features That Matter for Solopreneurs
1. ClawHub Marketplace
Browse, install, and update plugins from inside OpenClaw. No more manual npm installs. Think App Store for your AI agent.
2. GPT-5.4 Support
OpenClaw now supports GPT-5.4 natively — including the mini and nano versions. GPT-5.4 supports up to 1 million tokens of context, similar to Claude Opus 4.6.
3. /btw Side Questions
Ask a quick question mid-task without it polluting your session history. The main task continues uninterrupted. Small feature, big quality-of-life improvement.
4. SSH Sandboxes
Run OpenClaw agents remotely over SSH on a server you control. Major for security — isolates your agent from your main machine.
5. Exa + Tavily + Firecrawl Search
Three new web search providers replace the old stack. Exa and Tavily are significantly better for research-heavy workflows than what existed before.
6. Cross-Platform Skills
Install skills from the Claude marketplace, Codex, and Cursor directly into OpenClaw. One agent, access to every ecosystem's best tools.
7. Per-Agent Reasoning
Each agent can now have its own reasoning/thinking defaults. You can configure how deeply different agents think before acting — less for quick tasks, more for complex ones.
8. Native Image Generation
Image generation is now built in. Set your preferred model in config, and it works. No separate plugin, no third-party wrappers.
The /btw Command: Small but Brilliant
This one deserves more attention than it's getting. Anyone who has used an AI agent for a long-running task knows the problem: you're 20 minutes into a research session and you need to ask a quick clarifying question. You type it, and suddenly the agent has incorporated your question into the session context — now it thinks that question is part of the task.
The /btw command solves this cleanly. Type /btw [your question] and OpenClaw takes a snapshot of the current session state, answers your question in context, and discards the exchange from the main session history. The task continues exactly where it was. Your question never happened as far as the agent is concerned.
Example: You're running a competitor research session. Mid-task you realize you want to check something unrelated. Type /btw what's the URL for Etsy's seller analytics dashboard? — you get the answer, the research session continues clean. That's the entire feature, and it's genuinely useful every day.
The Security Picture Got More Complex
Here's the part most coverage is skipping: while this release includes 20 security patches, the launch of ClawHub also introduced new attack surface.
What the Security Research Says
- Bitdefender documented nearly 900 malicious plugins flooding the ClawHub marketplace in the weeks before this release. Automated scripts were uploading new malicious skills every few minutes.
- Cisco tested a malicious OpenClaw skill called "What Would Elon Do?" and found it silently exfiltrated data and used prompt injection to bypass safety guidelines — without the user knowing.
- SecurityScorecard identified tens of thousands of exposed OpenClaw instances leaking API keys publicly.
- 25%+ of available packages in an independent analysis contained vulnerabilities of some kind.
This doesn't mean ClawHub is unusable. It means you need to treat plugin installation the way you'd treat downloading software from an unknown website — verify the publisher, check the install count, read the permissions the plugin requests. Only install plugins from developers with a track record.
The SSH sandbox feature in this release is actually the right response to the security problem: run your agents in an isolated environment where a compromised plugin can't reach your main machine. If you're running OpenClaw seriously, that's now the recommended setup.
Breaking Changes to Know About
This release has 13 breaking changes. Most are environment variable renames. If you're already running OpenClaw, check two things before updating:
1. Environment variable names changed. Several variables that used to reference "moltbot" (the old name) have been renamed to "openclaw_". If you set up OpenClaw a while ago and haven't updated your config, you need to rename those variables manually before the update will work correctly.
2. Old state directory no longer auto-detected. If your session state files are still in the old moltbot directory path, they won't be found automatically. You need to move them to the new openclaw directory before updating.
The release notes on GitHub have the full migration list. If you're on a recent version (post-January 2026), you're probably fine. If you installed months ago and haven't touched the config since, check before you update.
Also This Week: Sora Is Gone
In the same week OpenClaw shipped its biggest release, OpenAI announced it's shutting down Sora — its AI video generation app — just months after launch. The Disney partnership ended with it. OpenAI is redirecting compute resources toward business tools ahead of a potential IPO later this year.
For solopreneurs who were using Sora for video content, the alternatives are Runway ML, Kling AI, and Pika Labs. All three are more mature products with better pricing structures for solo creators anyway.
The contrast between these two stories is notable: a scrappy open-source agent shipped 45 features in a single release and tripled its GitHub stars in a month, while a billion-dollar company quietly shut down a product it launched with fanfare six months ago. That's the pace of this market.
The Solopreneur Take
OpenClaw 3.22 is the release that makes the platform worth learning properly. ClawHub means the ecosystem is about to explode — developers are already building skills for Etsy management, content workflows, email automation, and competitive research. That directly benefits solopreneurs who want to automate their operations.
The setup barrier is still real. SSH sandboxes, Docker, environment variable configuration — this is not plug-and-play. But with ClawHub, the payoff of setting it up correctly is now much higher. You're not just getting one agent — you're getting access to a growing marketplace of capabilities that other people built for you.
If you've been on the fence about OpenClaw, this is the release that tips the scale. And if security concerns have been holding you back, the SSH sandbox is now the answer to that concern.
Either way — the agent era is moving faster than anyone predicted. Staying informed isn't optional anymore.
Automate Your Business Without the Setup Headache
If you want automation without the Docker and SSH configuration required by OpenClaw, Manus AI gives you similar workflow power on a clean free-tier interface. We built a pack of 10 copy-paste workflows specifically for solopreneurs — content batching, competitor research, email triage, revenue reports, and more.