--- title: "Security risks for OpenClaw users and how to mitigate them" url: https://daily.dev/posts/security-risks-for-openclaw-users-and-how-to-mitigate-them-qdjozk6g3 source_url: https://securelist.com/openclaw-security/120484 type: article source: "Securelist" published: 2026-07-01T12:27:51.328Z updated: 2026-08-24T06:52:36.047Z tags: ["cyber", "ai-agents", "malware", "openclaw"] reading_time: 5 upvotes: 2 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security risks for OpenClaw users and how to mitigate them **[Securelist](https://daily.dev/sources/securelist)** · 5 min read · 2 upvotes · 0 comments ## Summary OpenClaw (formerly Clawdbot/Moltbot) is a fast-growing AI agent ecosystem that lets users automate tasks using natural-language 'skills' from a marketplace called ClawHub. Around 530 vulnerabilities have been discovered in under two years, many involving sensitive data storage and excessive privilege issues. Malicious skills pose a supply-chain-like threat — over 1,100 malicious accounts have been created since January 2026, distributing 600+ harmful skills before any security scanning was in place. OpenClaw has since partnered with VirusTotal and NVIDIA's SkillSpector for preliminary scanning, but attacks continue. Recommended mitigations include isolating the agent from critical infrastructure, scanning all incoming skills, monitoring network access, and enforcing a comprehensive AI usage policy. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#cyber](https://daily.dev/tags/cyber), [#ai-agents](https://daily.dev/tags/ai-agents), [#malware](https://daily.dev/tags/malware), [#openclaw](https://daily.dev/tags/openclaw) [View this post on daily.dev](https://daily.dev/posts/security-risks-for-openclaw-users-and-how-to-mitigate-them-qdjozk6g3)