Declawed: An Advanced Community-Driven Malware Scanner for ClawHub SKILL.md Files
Declawed is a security tool designed to scan SKILL.md files uploaded to ClawHub. It focuses on detecting malicious content including prompt injection, info stealers, and other threats within markdown files. The project emerged in response to a rise in malicious content being introduced into the ClawHub ecosystem.
Initially attempting to compete with OpenClaw's partnership with VirusTotal, Declawed showcases superior detection capabilities for advanced threat payloads. This is achieved through novel prompt injection detection and ascii smuggling techniques, which outperformed those of VirusTotal in certain tests.
Central to Declawed's effectiveness is its community-driven nature. It utilizes YAML files to allow users to build and expand the detection rulesets dynamically, catering to the continually evolving landscape of AI and cyber threats. Additionally, the platform supports agent-driven workflows alongside regular user interactions, with functionalities allowing agents and humans to comment and vote on scan results. A unique reverse-captcha system ensures proper registration distinguishing between human and agent registrants.
Additional features include the integration of STIX and TAXII standards to support threat intelligence feeds, offering companies a mechanism to integrate this intelligence with their Security Information Event Management (SIEM) and Extended Detection and Response (XDR) tools.
📖 Read the full source: r/openclaw
👀 See Also
Litellm PyPI Package Compromised: Malicious Version 1.82.8 Exfiltrated Credentials
The litellm PyPI package, which unifies calls to OpenAI, Anthropic, Cohere and other LLM providers, was compromised with malicious version 1.82.8 that exfiltrated SSH keys, cloud credentials, API keys, and other sensitive data for about an hour.
Agent Isolation Security Analysis: From No Sandbox to Firecracker VMs
Analysis of how Cursor, Claude Code, Devin, OpenAI, and E2B isolate agent workloads, ranging from no sandbox to hardware-isolated Firecracker microVMs. Container runtimes have had escape CVEs annually since 2019, while Firecracker has zero guest-to-host escapes in seven years.
AI Is Breaking the Two Vulnerability Cultures: Coordinated Disclosure vs. Linux's "Bugs Are Bugs"
Jeff Kaufman analyzes how AI vulnerability discovery is fracturing both coordinated disclosure and Linux's quiet-fix culture, using the recent Copy Fail (ESP) vulnerability as a case study.
Google Threat Intelligence Group Reports First AI-Developed Zero-Day Exploit Bypassing 2FA
Google Threat Intelligence Group detected the first fully AI-developed zero-day exploit that bypasses 2FA in a popular open-source web-based system administration tool, along with self-morphing malware and Gemini-powered backdoors.