TL;DR


ClawHub, OpenClaw's official skill marketplace, is a malware distribution platform. Security researchers audited 9,234 published skills and found 3,401 (36.82%) contain security flaws. Of those, 341 are explicitly malicious: credential theft, payload delivery, privilege escalation, and reverse shells. The audit discovered 156...