The #1 most downloaded skill on OpenClaw marketplace was malware (twitter.com)

I don't want to hear a single complaint from the "i like to live dangerously" people about this. If you gave control of your computer to an AI and didn't take 5s to audit a skills.md file you should have your entire computer compromised.

[dead]

In fairness to the skill author, this is indeed what Elon did to the US government with DOGE

I suspect the download count was also trivially gamed, so I doubt many people got infected with this in reality.

If one skill can tamper the whole system then, we are not doing the right thing by protecting the agent Infrastructure.

Must be some good malware

What are the chances that, just like moltbook, the rankings are botted, meaning that not many people actually downloaded the skill.

People are more likely to download more popular items, so I don’t doubt that people are affected, but given how botted moltbook was, I wouldn’t be surprised for download numbers to be botted aswell.