Tulio Sousa

Hey Product Hunt

1. Real working conditions can't be verified before taking a job reviews lie. Need a service for direct contact with former employees. Willing to pay: 50 100 when I successfully get hired.

2. A gambling addict hasn t been able to quit online casinos for years. All known methods have failed. He has three hypotheses for solving his own problem. Willing to pay $15 30/month.

3. A designer needs an AI agent to eliminate the manual drudgery of adapting designs for mobile/tablet. Willing to pay 20 30 per project.
Boris and Victoria,
ProblemHunt

Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:

While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.

But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.

They weren t.

Both links led to malicious infrastructure.

Indeed, this wasn't an isolated case.

We re officially in nominees season for the Orbit Awards: AI Workflow Automation.