← Back to Feed

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

June 23, 2026 · Unit 42 · Severity: MEDIUM

Unit 42's analysis of OpenClaw's ClawHub marketplace reveals evasive malicious skills that bypass automated scanners to deploy infostealers and conduct agentic financial fraud. The research highlights the emerging AI supply chain threat as agentic AI platforms grow in popularity. Skill marketplaces represent a new attack surface for AI-driven organizations.

Key Takeaways

  • Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers.
☕ Buy a Coffee