--- title: It's easy to backdoor OpenClaw, and its skills leak API keys description: OpenClaw, an open source AI agent platform, has multiple critical security vulnerabilities. Researchers found that 7.1% of skills in its ClawHub marketplace... canonical: https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: It's easy to backdoor OpenClaw, and its skills leak API keys | daily.dev og:description: OpenClaw, an open source AI agent platform, has multiple critical security vulnerabilities. Researchers found that 7.1% of skills in its ClawHub marketplace... og:url: https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev og:image: https://api.daily.dev/og/posts/FfpEVIMEV.png og:image:alt: It's easy to backdoor OpenClaw, and its skills leak API keys og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # It's easy to backdoor OpenClaw, and its skills leak API keys **[The Register](https://daily.dev/sources/theregister)** · 4 min read · 0 upvotes · 0 comments ## Summary OpenClaw, an open source AI agent platform, has multiple critical security vulnerabilities. Researchers found that 7.1% of skills in its ClawHub marketplace (283 out of 4,000) expose sensitive credentials including API keys, passwords, and credit card numbers through plaintext logs. The platform is vulnerable to indirect prompt injection attacks that allow attackers to backdoor user machines, steal data, install malware, and execute remote commands. Security firms Snyk and Zenity demonstrated exploits including credential theft, data exfiltration, and C2 beacon installation through malicious skills and poisoned documents. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Security risks for OpenClaw users and how to mitigate them](https://daily.dev/posts/security-risks-for-openclaw-users-and-how-to-mitigate-them-qdjozk6g3) · Securelist · 2 upvotes · 0 comments - [OpenClaw gives users yet another reason to be freaked out about security](https://daily.dev/posts/openclaw-gives-users-yet-another-reason-to-be-freaked-out-about-security-nncjkijgt) · Ars Technica · 21 upvotes · 6 comments - [OpenClaw is a Security Nightmare Dressed Up as a Daydream](https://daily.dev/posts/openclaw-is-a-security-nightmare-dressed-up-as-a-daydream-vfmeybede) · Hacker News · 5 upvotes · 1 comments - [Security professionals express concern over OpenClaw](https://daily.dev/posts/security-professionals-express-concern-over-openclaw-mk7zd1kcd) · SD Times · 0 upvotes · 0 comments - [Giving OpenClaw The Keys to Your Kingdom? Read This First](https://daily.dev/posts/giving-openclaw-the-keys-to-your-kingdom-read-this-first-nvdzt2qrw) · JFrog · 1 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security), [#vulnerability](https://daily.dev/tags/vulnerability), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"It's easy to backdoor OpenClaw, and its skills leak API keys","url":"https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev"},"datePublished":"2026-02-05T23:36:51.166Z","dateModified":"2026-02-27T07:15:37.220Z","description":"OpenClaw, an open source AI agent platform, has multiple critical security vulnerabilities. Researchers found that 7.1% of skills in its ClawHub marketplace...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/01a642f406afd7d6191eb37b8810922a?_a=AQAEunF","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/01a642f406afd7d6191eb37b8810922a?_a=AQAEunF","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/it-s-easy-to-backdoor-openclaw-and-its-skills-leak-api-keys-ffpevimev","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,security,vulnerability,prompt-injection","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"It's easy to backdoor OpenClaw, and its skills leak API keys"}]} ```