Malicious OpenClaw Skills Distribute AMOS Stealer via ClawHub

# Malicious OpenClaw Skills Distribute AMOS Stealer via ClawHub

https://gcdradar.vercel.app/incidents/malicious-openclaw-skills-distribute-amos-stealer-via-clawhu · AIR-2026-0421 · closed 2026-02-15

- Lane: Supply chain
- Severity: 3 (Confirmed exploitation)
- Fix status: Fix status unknown
- First reported: 2026-02-01
- AI role: Attack on AI
- Products: OpenClaw, ClawHub

## Summary

Security researchers discovered that seventeen percent of sampled third-party OpenClaw skills harbored malicious code on ClawHub. The compromised skills executed stealth commands to steal private keys, exfiltrate API tokens, and deploy AMOS Stealer.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-02-01: Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub (https://incidentdatabase.ai/cite/1368)

## Sources

- 2026-02-01 AI Incident Database: Malicious OpenClaw Skills Reportedly Delivered AMOS Stealer and Exfiltrated Credentials via ClawHub https://incidentdatabase.ai/cite/1368

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.