Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
JDoodle.ai
Except running it locally, what other advantage it has? it is going to hit the same LLMs living on the cloud and sharing my data with them right?
Agnes AI
@gokuljd local first is definitely one of the biggest selling point.
The concept of OpenClaw is exactly what I've been waiting for—an AI that delivers "Results as a Service" . The idea of waking up to finished work instead of a blank chat window is the dream.
My main hesitation, and I'm sure many feel the same, is the balance between power and practicality. The deployment stories and token costs (aka "feeding the lobster") can be a bit scary for non-developers . For this to cross the chasm to early majority users like myself, it needs to get much closer to that "plug and play" experience .
That said, the local-first approach and data ownership are worth the effort. Congrats on the launch!
Minara
This is what people have been waiting for: an open-source agent that can turn ideas into actionable plans and execution. It’s quite similar to Minara, which we launched yesterday. But we’re particularly focused on closing the loop from analysis to decision to on-chain execution in digital finance.
Full system access via a chat app sounds incredibly powerful, but also a bit scary if it's not secure. I love that they mentioned 'local privacy,' though. I wonder if the data stays encrypted on the machine, or if there's a risk of someone else hopping into the chat and running commands.
When can I have it on my spare Android and carry it around as my personal assistant? Of course with its own personality 😁 maybe even with its own OS to contain it…
Triforce Todos
I love that it’s hackable. This feels less like a tool and more like a platform waiting for crazy ideas.
This product is spot-on—controlling your computer remotely via chat apps to automate shell, browser, and workflows sounds like the ultimate productivity hack (or lazy dev’s dream). Local privacy + full system access is developer-friendly, and 50+ integrations should cover most use cases. If it’s stable enough, I’d run it on a test server for automation tasks first. Bookmarked—gonna play with it this weekend.