Skip to content

The #1 most downloaded skill on OpenClaw marketplace was malware

twitter.com
66 pointsUmofomia7 comments
On HN

Comments

I don't want to hear a single complaint from the "i like to live dangerously" people about this. If you gave control of your computer to an AI and didn't take 5s to audit a skills.md file you should have your entire computer compromised.

Dont forget, tgey also gave control to rhe internet, cause thats even worse.

What are the chances that, just like moltbook, the rankings are botted, meaning that not many people actually downloaded the skill.

People are more likely to download more popular items, so I don’t doubt that people are affected, but given how botted moltbook was, I wouldn’t be surprised for download numbers to be botted aswell.

Must be some good malware

If one skill can tamper the whole system then, we are not doing the right thing by protecting the agent Infrastructure.

I suspect the download count was also trivially gamed, so I doubt many people got infected with this in reality.

In fairness to the skill author, this is indeed what Elon did to the US government with DOGE

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.