Skills Security Guide
Protect your OpenClaw setup from malicious extensions with our 12-point security checklist
🚨 Recent Security Alert: ClawHub Supply Chain Attack
On February 4, 2026, Koi Security discovered 341 malicious skills on ClawHub as part of the “ClawHavoc” campaign. These skills were designed to steal credentials and install malware on users' systems.
This guide includes specific recommendations to protect against this and similar attacks.
Installing third-party skills for your OpenClaw setup can extend functionality, but it also introduces security risks. The recent ClawHub supply chain attack demonstrated how malicious skills can compromise your entire setup. This guide provides a comprehensive security checklist to help you vet skills safely.
Why Skills Security Matters
Unlike traditional software, OpenClaw skills run with the same permissions as your main AI assistant. This means a malicious skill has access to everything your bot can access: your email, calendar, messaging accounts, API keys, and potentially sensitive business data. The 341 malicious skills discovered in the ClawHavoc campaign used techniques like fake “prerequisites” to install malware on users' systems.
12-Point Skills Security Checklist
Hardening Your Setup
Beyond individual skill vetting, consider these hardening measures for your overall OpenClaw setup:
- Run your OpenClaw instance in an isolated environment (container, VM, or dedicated user)
- Use separate API keys with minimal necessary permissions
- Implement network monitoring to detect unusual outbound connections
- Regularly audit installed skills and their permissions
- Maintain backups of your configuration before installing new skills
What to Do If You Suspect a Malicious Skill
- Remove the skill immediately from your configuration
- Rotate all API keys that the skill had access to
- Check your system for unusual processes or network activity
- Review your accounts for unauthorized access or changes
- Report the skill to the appropriate security authorities
Need Professional Security Setup?
Our security-first OpenClaw installations include comprehensive skill vetting, credential isolation, and ongoing monitoring to protect against threats like the ClawHavoc campaign.