41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a07df5-49ee-7218-91aa-008e448002cd

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

Snyk · published 10 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at snyk.io Wayback capture

1blogs citing

First cited: 5 Mar 2026
Most recent: 5 Mar 2026
Rank this month: not ranked
Links from this post: 10
Words captured: 1,162

Cited by

Blog

In the post

Date

Hunting for malicious OpenClaw AI in the modern enterprise Read at the source ↗

5 Mar 2026

Links from this post

Link

Host

https://snyk.io/articles/clawdbot-ai-assistant/

snyk.io

https://snyk.io/articles/skill-md-shell-access/

snyk.io

Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise Read at the source ↗

https://snyk.io/articles/clawdhub-malicious-campaign-ai-agent-skills/

snyk.io

280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PII Read at the source ↗

https://www.linkedin.com/in/talliran/

linkedin.com

https://evo.ai.snyk.io/

evo.ai.snyk.io

https://github.com/invariantlabs-ai/mcp-scan

github.com

https://evo.ai.snyk.io/evo-discovery-try-now/

evo.ai.snyk.io

https://snyk.io/lp/unifying-control-agentic-ai-evo-by-snyk/?utm_source=chatgpt.com

snyk.io