Poisoned ClawdBot Skill Distributed on Registry

# Poisoned ClawdBot Skill Distributed on Registry

https://gcdradar.vercel.app/incidents/poisoned-clawdbot-skill-distributed-on-registry · AIR-2026-0345 · closed 2026-02-20

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2026-02-06 (happened 2026-01-26)
- AI role: Attack on AI
- Products: ClawdBot, ClawdHub

## Summary

A researcher demonstrated a supply chain attack using a poisoned skill on a registry that triggered prompt injection and shell command execution. Multiple users downloaded the compromised package during the test.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-02-06: eating lobster souls Part II: the supply chain (aka - backdooring the #1 downloaded clawdhub skill) (https://x.com/theonejvo/status/2015892980851474595)
- 2026-02-06: Supply Chain Compromise via Poisoned ClawdBot Skill (https://atlas.mitre.org/studies/AML.CS0049)

## Sources

- 2026-02-06 MITRE ATLAS: Supply Chain Compromise via Poisoned ClawdBot Skill https://atlas.mitre.org/studies/AML.CS0049
- 2026-02-06 x.com: eating lobster souls Part II: the supply chain (aka - backdooring the #1 downloaded clawdhub skill) https://x.com/theonejvo/status/2015892980851474595

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.