Record · corpus.blog/posts/01a0d4a0-4836-7245-96fd-928cb2a89765

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

Unit 42 · published 23 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at unit42.paloaltonetworks.com Wayback capture

1blogs citing

First cited: 9 Jul 2026
Most recent: 9 Jul 2026
Rank this month: not ranked
Links from this post: 22
Words captured: 2,365

Cited by

Blog

In the post

Date

simonroses.com

Securing the AI Coding Pipeline (Part 9) Read at the source ↗

9 Jul 2026

Links from this post

Link

Host

OpenClaw Collaborates with NVIDIA for Stronger Agent Skill Security Read at the source ↗

openclaw.ai

https://www.koi.ai/product/endpoint

koi.ai

https://docs.paloaltonetworks.com/advanced-url-filtering

docs.paloaltonetworks.com

https://docs.paloaltonetworks.com/dns-security

docs.paloaltonetworks.com

https://www.paloaltonetworks.com/sase/prisma-browser

paloaltonetworks.com

https://docs.paloaltonetworks.com/wildfire

docs.paloaltonetworks.com

https://blog.talosintelligence.com/a-deep-dive-into-lokibot-infection-chain/

blog.talosintelligence.com

https://www.paloaltonetworks.com/unit42/assess/ai-security-assessment

paloaltonetworks.com

https://www.paloaltonetworks.com/unit42/ai-advantage

paloaltonetworks.com

https://start.paloaltonetworks.com/contact-unit42.html

start.paloaltonetworks.com

https://nodejs.org/learn/getting-started/an-introduction-to-the-npm-package-manager

nodejs.org

https://pypi.org/

pypi.org

https://www.bitdefender.com/en-us/blog/labs/helpful-skills-or-hidden-payloads-bitdefender-labs-dives-deep-into-the-openclaw-malicious-skill-trap

bitdefender.com

https://www.koi.ai/blog/clawhavoc-341-malicious-clawedbot-skills-found-by-the-bot-they-were-targeting

koi.ai

https://www.trendmicro.com/en_us/research/26/b/openclaw-skills-used-to-distribute-atomic-macos-stealer.html

trendmicro.com

OpenClaw Partners with VirusTotal for Skill Security Read at the source ↗

openclaw.ai

https://medium.com/@ewindisch/curl-bash-a-victimless-crime-d6676eb607c9

medium.com

https://research.jfrog.com/post/omnicogg-malicious-skill/

research.jfrog.com

https://www.bankrate.com/investing/what-is-a-rug-pull/

bankrate.com

Trust No Skill: Integrity Verification for AI Agent Supply Chains Read at the source ↗

unit42.paloaltonetworks.com

https://www.paloaltonetworks.com/network-security/advanced-url-filtering

paloaltonetworks.com

https://www.cyberthreatalliance.org

cyberthreatalliance.org