Beware of OpenClaw Agent Security Threats

Security researchers have discovered a new type of malicious Skill.MD file that turns OpenClaw agents into members of a 'ClawSwarm' that carries out third-party commands.

This attack proceeds as follows, without the agent operator's awareness:

• Malicious skill download: Users download seemingly harmless skills, such as a cron job helper or a security assistant.
• Performing additional tasks: Following commands embedded in the skill, the agent performs tasks such as signing up for specific sites or installing a digital wallet.
• Ongoing command reception: The agent periodically communicates with a third-party site through a 'heartbeat' pattern and follows additional instructions.

Agent operators should audit the packages their agents install and, in particular, monitor the websites they connect to on a regular basis in order to prevent security incidents.