Writing on the @1Password blog, Jason Meller says that he found that the top downloaded OpenClaw skill was a malware delivery vehicle:
While browsing ClawHub (I won t link it for obvious reasons), I noticed the top downloaded skill at the time was a Twitter skill. It looked normal: description, intended use, an overview, the kind of thing you d expect to install without a second thought.
But the very first thing it did was introduce a required dependency named openclaw-core, along with platform-specific install steps. Those steps included convenient links ( here , this link ) that appeared to be normal documentation pointers.
They weren t.
Both links led to malicious infrastructure.
Indeed, this wasn't an isolated case.
绝大部分产品的功能开发程度和用户使用率比重相距甚远,我相信OpenClaw只是第一步:优化你的用户界面。
Put together what I think is the most comprehensive guide to OpenClaw out there right now — installation, real costs, hardware recommendations, and unfiltered Twitter reviews from people who loved it and people who rage-quit. Might be useful for anyone evaluating it. https://virtualuncle.com/openclaw-complete-guide-2026/
The fact that OpenClaw runs through messaging apps people already use daily is what makes it actually stick most autonomous agents die because the interface asks too much of the user
who came up with molt?
Helply
this looks really great @steipete. excited to try it out :)
Noodle Seed
Congrats on the launch! @steipete - Will be tinkering with Clawdbot over the weekend.
Visla
starting using it a week ago, after I saw someone run it on Raspberry Pi and damn! :)