Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
Hi how can I prevent this from bankrupting me?
Agnes AI
@sjorsfestt maybe router...
I really like the combo of self-hosted + chat anywhere. Being able to talk to an agent from WhatsApp or Telegram while knowing everything stays local is a strong trust signal, especially for power users and builders.
This is a powerful tool. I installed it on a separate computer that I was not using for personal used. The tool is very powerful and could delete or modify your files.
Great project! Two questions: 1. Is there voice control? 2. Can it control a mobile phone?
The self-hosted part immediately caught my eye, feels way more comfortable than a black box. How technical do you need to be to get started?
@joosepseitam as suggested by maker @steipete, @OpenClaw is "not for everyone." - source
non-technical people might prefer using a hosted solution like @Atomic Bot or @KiloClaw. hope it helps!
绝大部分产品的功能开发程度和用户使用率比重相距甚远,我相信OpenClaw只是第一步:优化你的用户界面。