Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
This product is spot-on—controlling your computer remotely via chat apps to automate shell, browser, and workflows sounds like the ultimate productivity hack (or lazy dev’s dream). Local privacy + full system access is developer-friendly, and 50+ integrations should cover most use cases. If it’s stable enough, I’d run it on a test server for automation tasks first. Bookmarked—gonna play with it this weekend.
This is a really interesting direction. Making a personal agent that lives with your actual computer not just in the cloud feels like a big step toward agents that are genuinely useful, not just conversational.
The local-first + chat-native control combo is especially compelling if it stays secure and predictable. Curious to see how people shape their workflows once an agent can reliably “do” instead of just suggest.
Hi how can I prevent this from bankrupting me?
Agnes AI
@sjorsfestt maybe router...
I really like the combo of self-hosted + chat anywhere. Being able to talk to an agent from WhatsApp or Telegram while knowing everything stays local is a strong trust signal, especially for power users and builders.
This is a powerful tool. I installed it on a separate computer that I was not using for personal used. The tool is very powerful and could delete or modify your files.
Great project! Two questions: 1. Is there voice control? 2. Can it control a mobile phone?