--- title: From magic to malware: How OpenClaw's agent skills... description: OpenClaw's agent skills ecosystem has become an active malware distribution vector. The top downloaded skill on ClawHub was confirmed to deliver macOS... canonical: https://daily.dev/posts/cf2r81w4g twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: From magic to malware: How OpenClaw's agent skills become an attack surface | daily.dev og:description: OpenClaw's agent skills ecosystem has become an active malware distribution vector. The top downloaded skill on ClawHub was confirmed to deliver macOS... og:url: https://daily.dev/posts/cf2r81w4g og:image: https://api.daily.dev/og/posts/cF2r81W4g.png og:image:alt: Post cover image og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # From magic to malware: How OpenClaw's agent skills become an attack surface **[Ole-Martin](https://daily.dev/sources/xdczd-phg)** · [@ombratteng](https://daily.dev/ombratteng) · 0 upvotes · 0 comments ## Summary OpenClaw's agent skills ecosystem has become an active malware distribution vector. The top downloaded skill on ClawHub was confirmed to deliver macOS infostealing malware through markdown-based installation instructions that bypass MCP security controls. Hundreds of skills were reportedly involved in this campaign, exploiting the fact that skills are markdown files containing executable instructions. The attack chain uses staged delivery through "prerequisite" links that decode obfuscated payloads targeting browser sessions, credentials, SSH keys, and cloud access. Organizations should treat any OpenClaw usage on corporate devices as a potential security incident and implement strict isolation, provenance tracking, and permission controls for agent frameworks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [More Malicious OpenClaw Skills Threaten AI Supply Chain](https://daily.dev/posts/more-malicious-openclaw-skills-threaten-ai-supply-chain-ir1m374gw) · Dark Reading · 0 upvotes · 0 comments - [How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware](https://daily.dev/posts/how-a-malicious-google-skill-on-clawhub-tricks-users-into-installing-malware-plxcvkhli) · Snyk · 2 upvotes · 0 comments - [Security risks for OpenClaw users and how to mitigate them](https://daily.dev/posts/security-risks-for-openclaw-users-and-how-to-mitigate-them-qdjozk6g3) · Securelist · 2 upvotes · 0 comments - [Securing OpenClaw Against”ClawHavoc”](https://daily.dev/posts/securing-openclaw-against-clawhavoc--eeag4dgax) · Security Boulevard · 2 upvotes · 0 comments - [Malicious OpenClaw Skills Used to Distribute Atomic MacOS Stealer](https://daily.dev/posts/malicious-openclaw-skills-used-to-distribute-atomic-macos-stealer-olqbozmrp) · Trend Micro · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#mac](https://daily.dev/tags/mac), [#malware](https://daily.dev/tags/malware), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/cf2r81w4g) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/cf2r81w4g","headline":"From magic to malware: How OpenClaw's agent skills become an attack surface","text":"Shared: From magic to malware: How OpenClaw's agent skills become an attack surface","url":"https://daily.dev/posts/cf2r81w4g","datePublished":"2026-02-05T12:25:10.422Z","dateModified":"2026-03-15T06:19:21.414Z","author":{"@type":"Person","name":"Ole-Martin","url":"https://daily.dev/ombratteng","image":"https://avatars.githubusercontent.com/u/1681525?v=4","description":"Web magician 🪄\nDigital Janitor 🧹","worksFor":{"@type":"Organization","name":"Norwegian Tax Administration","logo":"https://www.google.com/s2/favicons?domain=skatteetaten.no&sz=128"},"interactionStatistic":{"@type":"InteractionCounter","interactionType":{"@type":"EndorseAction"},"userInteractionCount":65360}},"image":"https://media.daily.dev/image/upload/s--2-1xRawN--/f_auto/v1722860399/public/Placeholder%2011","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"sharedContent":{"@type":"WebPage","url":"https://api.daily.dev/r/YOsVSVn0v"},"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/xdczd-phg","name":"Ole-Martin"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Ole-Martin","item":"https://daily.dev/sources/xdczd-phg"},{"@type":"ListItem","position":3,"name":"From magic to malware: How OpenClaw's agent skills become an attack surface"}]} ```