Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
Oasi
The best open source product till now!
YAYZY
Moltbot/Claudbot or now (OpenClaw) is easily one of the most trending AI agents right now – it literally does everything for you, from managing your browser and files to automating entire workflows, all from a simple chat
I am creating a platform, https://clawsifyai.com/, as an all-in-one solution for OpenClaw. It allows users to deploy it, create AI agents with different personas, build skills, and access everything easily.