← all tags
// tag: openclaw
does an openclaw skill need permission to steal ssh keys
No, and OpenClaw's own docs say so: sandboxing is off by default and host exec runs unprompted. The skill doesn't break in — it asks the agent, and the agent runs it.
how many clawhub skills are actually malicious: 0.3% or 49%
At least 1,184 malicious skills have hit ClawHub. Live counts range from 0.3% of the registry to 48.7% — because the three scanners agree on 0.69%.
why your AI agent's scheduled task stopped running
Your AI agent's scheduled task stopped working? The schedule is usually fine — the process meant to fire it isn't. The four checks that find it, in order.
openclaw 2026.9 update: what's new and should you update
What actually changed in OpenClaw 2026.9.1 and 2026.9.2 — live settings, restart-proof replies, GPT-6 Astra — plus the two defaults that flipped without a headline.
