Researchers have warned OpenClaw users after malicious skills surfaced on ClawHub, exposing supply chain risks tied to weak plugin reviews.
OpenClaw integrates VirusTotal Code Insight scanning for ClawHub skills following reports of malicious plugins, prompt injection & exposed instances.