The entire purpose of the assistant was to see how others would try to abuse it. How would you do that without having it discoverable online? Seems like that's kind of the whole point...

It's literally called 'HackMyClaw'

Did you miss the bit where it was posted on hn?