Malicious skills turn AI agent OpenClaw into a malware delivery system
Ourtake
Ask an AI agent to install a 'Yahoo Finance' skill and it may hand your Mac to a Trojan. Helpful, in the way a stranger's USB stick is helpful.
What happened
Attackers published hundreds of skills for the self-hosted AI agent OpenClaw on the ClawHub platform, disguised as useful tools; the skills instructed the agent to download and run payloads including the Atomic Stealer macOS Trojan. VirusTotal flagged the issue, and OpenClaw responded by partnering with VirusTotal to scan all published skills, with flagged ones blocked and active skills re-scanned daily.