← all tags
// tag: clawhub
does an openclaw skill need permission to steal ssh keys
No, and OpenClaw's own docs say so: sandboxing is off by default and host exec runs unprompted. The skill doesn't break in — it asks the agent, and the agent runs it.
how many clawhub skills are actually malicious: 0.3% or 49%
At least 1,184 malicious skills have hit ClawHub. Live counts range from 0.3% of the registry to 48.7% — because the three scanners agree on 0.69%.
