Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
Why does it say Clawbot some places, Clawdbot other places? I heard it's Moltbot now due to Anthropic but now sure why the discrepancy with the old name?
Either way, I got mine setup and been using it! It's been delightful, though I do feel if you could solve the setup complexity to be more user friendly, this thing could absolutely explode. I have to wonder if you're keeping it intentionally a bit more advanced user-centric for now
Best of luck and thanks for creating this
Except running it locally, what other advantage it has? it is going to hit the same LLMs living on the cloud and sharing my data with them right?
Agnes AI
@gokuljd local first is definitely one of the biggest selling point.
Minara
This is what people have been waiting for: an open-source agent that can turn ideas into actionable plans and execution. It’s quite similar to Minara, which we launched yesterday. But we’re particularly focused on closing the loop from analysis to decision to on-chain execution in digital finance.
Full system access via a chat app sounds incredibly powerful, but also a bit scary if it's not secure. I love that they mentioned 'local privacy,' though. I wonder if the data stays encrypted on the machine, or if there's a risk of someone else hopping into the chat and running commands.
When can I have it on my spare Android and carry it around as my personal assistant? Of course with its own personality 😁 maybe even with its own OS to contain it…
Triforce Todos
I love that it’s hackable. This feels less like a tool and more like a platform waiting for crazy ideas.
This product is spot-on—controlling your computer remotely via chat apps to automate shell, browser, and workflows sounds like the ultimate productivity hack (or lazy dev’s dream). Local privacy + full system access is developer-friendly, and 50+ integrations should cover most use cases. If it’s stable enough, I’d run it on a test server for automation tasks first. Bookmarked—gonna play with it this weekend.