Top downloaded skill in ClawHub contains malware
1password.com
Top downloaded skill in ClawHub contains malware
1–10 of 166 posts
Re: Top downloaded skill in ClawHub contains malware
#2It begins...
Re: Top downloaded skill in ClawHub contains malware
#3It begins...
[deleted]
Re: Top downloaded skill in ClawHub contains malware
#4[deleted]
Re: Top downloaded skill in ClawHub contains malware
#5Was clawhub not doing any security on skills?
Re: Top downloaded skill in ClawHub contains malware
#6Why are these articles always AI written? What's the point of having AI generate a bunch of filler text?
Re: Top downloaded skill in ClawHub contains malware
#7Was clawhub not doing any security on skills?
How would they? This is AI, it has to move faster than you can even ask security questions, let alone answer them.
Re: Top downloaded skill in ClawHub contains malware
#8Back in the XP days if you let your computer for too much time on the hands of an illiterate relative, they would eventually install something and turn Internet Explorer into this https://i.redd.it/z7qq51usb7n91.jpg.
Now the security implications are even greater, and we won't even have funny screenshots to share in the future.
Re: Top downloaded skill in ClawHub contains malware
#9This just seems like the logical consequence of the chosen system to be honest. "Skills" as a concept are much too broad and much too free-form to have any chance of being secure. Security has also been obviously secondary in the OpenClaw saga so far, with users just giving it full permissions to their entire machine and hoping for the best. Hopefully some of this will rekindle ideas that are decades old at this point (you know, considering security and having permission levels and so forth), but I honestly have my doubts.
Re: Top downloaded skill in ClawHub contains malware
#10Was clawhub not doing any security on skills?
IIRC the creator specifically said he's not reviewing any of the submissions and users should just be careful and vet skills themselves. Not sure who OpenClaw/Clawhub/Moltbook/Clawdbot/(anything I missed) was marketed at, but I assume most people won't bother looking at the source code of skills.