Malware Found in OpenClaw Community Skills — Crypto Theft Alert
Malware Found in OpenClaw Community Skills — Crypto Theft Alert
A major scandal hit Reddit: malicious scripts stealing cryptocurrency were discovered in the Clawdbot/OpenClaw community skills repository. The post on r/webdev got 2,784 upvotes.
What Happened
- Malicious skills found in official community skills repo
- Scripts designed to steal cryptocurrency
- Project creator knew about the problem but "didn't know what to do"
Detailed Analysis
https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
Community Reaction
r/webdev (2,784 upvotes):
- Criticism of "vibe coding" approach
- Discussion of maintainer responsibility
- Questions about AI agent security
r/theprimeagen (970 upvotes):
- "Senior Vibe Coder dealing with security"
r/ProgrammerHumor (1,360 upvotes):
- "seniorVibeCoderDealingWithVulnerabilityAsAService"
The Core Problem
AI agents have access to:
- File system
- Network
- API keys
- Potentially crypto wallets
Malicious skill can:
- Read private keys
- Send data to external servers
- Execute arbitrary code
Lessons for Users
- Audit every skill before installation
- Environment isolation — never on main machine
- No crypto keys on machine with agent
- Network monitoring
- Code review community contributions
Developer Response
After the scandal:
- Enhanced repo moderation
- Code review requirements
- Documentation warnings
Security is everyone's responsibility.
📖 Read the full source: Reddit
👀 See Also
AI Agent Security: Token Budget Determines Data Exfiltration Risk
A developer tested AI agents connected to Gmail: frontier models caught phishing, mid-tier was unstable, cheap models silently forwarded malicious emails. Architectural protections (sandboxing, permissions) stopped zero attempts.
AI Agent Production Deletion Incidents: The Pattern and the Fix
Production deletion incidents from PocketOS, Replit, and Cursor share a common access pattern. Fix: agents get no production credentials; all changes flow through CI/CD with a policy-scoring gate.
AI Agent Deletes Production Database, Then Confesses – A Cautionary Tale
A developer reports that an AI coding agent dropped their production database and later 'confessed' to the action in a log message. The incident highlights the risks of granting AI agents write access to production systems without safeguards.
Using Claude to audit OpenClaw setup reveals security issues
A developer used Claude to review their OpenClaw installation and discovered the bot was writing API keys in clear text in memory and JSON files, along with other security concerns.