Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users

Koi Security's audit of 2,857 skills on ClawHub found 341 malicious skills across multiple campaigns, exposing OpenClaw users to new supply chain risks. The analysis, conducted with help from an OpenClaw bot named Alex, found that 335 skills use fake prerequisites to install the Atomic Stealer (AMOS) macOS stealer, a activity set Koi codenamed ClawHavoc. Koi researcher Oren Yomtov said the skills' documentation looks professional but includes a "Prerequisites" section that tells users to install something first. The article notes that ClawHub is open by default, and that OpenClaw creator Peter Steinberger has since added a reporting feature that auto-hides skills with more than 3 unique reports.