As reported by eSecurityPlanet in 2026, there were 341 malicious skills on OpenClaw’s ClawHub as of February 4, 2026. A post from
1Password described reporting that hundreds of skills were distributing macOS malware via staged payloads and social engineering instructions.