clawsmith.com/idea/vet-clawhub-skills-for-malware-before-your-agent-installs-them

IdeaCompetitiveSECURITYCLIDEVTOOLLive

A security layer that vets ClawHub skills for malware and prompt injection before your agent installs them

ClawHub grew 380% to 13,729 skills in Q1 2026. Snyk found 36% contain prompt injection and 1,467 carry malicious payloads. The ClawHavoc campaign planted 1,184 weaponized skills in the marketplace. VirusTotal integration catches known malware but misses novel prompt injection, data exfiltration via tool outputs, and social engineering patterns unique to AI agent skills. This tool performs deep behavioral analysis of every skill before installation, catching threats that signature-based scanners miss.

Demand Breakdown

4,690

3,630

Social Proof 4 sources

Snyk ToxicSkills: 36% of ClawHub skills have prompt injection

@snyk · 2026-03

2,450 RD

1467 malicious skills, 36% prompt injection in Snyk audit

@netsec · 2026-03

2,350 RD

20% of ClawHub skills are malicious according to ClawHavoc

@ClaudeAI subreddit · 2026-02

2,340 HN

ClawHavoc: Malicious Clawed Skills

@hn · 2026-02

1,180

Gap Assessment

CompetitiveMultiple tools exist but differentiation opportunities remain

5 tools exist (VirusTotal Integration, Cisco Skill Scanner, SecureClaw, Clawned.io, SkillFortify) but gaps remain: Signature-based only, misses novel prompt injection, no behavioral analysis, no runtime sandboxing, no pre-install blocking; Static scanning only, no runtime sandboxing, no continuous monitoring, no trust scoring.

Features4 agent-ready prompts

Sandbox that executes a skill's entry point in an isolated container, monitors syscalls, network requests, and file access, and flags suspicious behavior

▶

Permission wrapper that restricts an installed skill's access to only the directories, APIs, and tools declared in its manifest

▶

Background watcher that hashes skill files on install and alerts if contents change unexpectedly (supply chain attack detection)

▶

Reputation system that aggregates install count, author history, code review status, and user reports into a trust score per skill

▶

Competitive LandscapeFREE

Product	Does	Missing
VirusTotal Integration	Scans all skills published to ClawHub for known malware signatures with daily re-scans	Signature-based only, misses novel prompt injection, no behavioral analysis, no runtime sandboxing, no pre-install blocking
Cisco Skill Scanner	Open-source CLI skill scanner from Cisco for community skill vetting	Static scanning only, no runtime sandboxing, no continuous monitoring, no trust scoring
SecureClaw	55-check automated audit mapping to OWASP Agentic Security top 10	Instance-level audit, does not analyze individual skills, no pre-install gate, no behavioral analysis
Clawned.io	Crowdsourced public security scanner for OpenClaw skills	Web-based scanning, not integrated into install flow, no runtime enforcement, no trust scoring
SkillFortify	Formal verification scanner for AI agent skills with 96.95% F1 score	Verification focused, no runtime sandboxing, no continuous monitoring, no community trust scoring

Aggregate Score

133,944

0 leads found

Details

TypeProduct Idea

Competitors5

Features4

Issues4

Leads0

Source Signals

All signals →

52.7KAwesome OpenClaw Skills: 5,400+ Curated Skills — 1M Monthly Views 34.5Kawesome-claude-code Hits 32K Stars: Central Hub for Claude Code Skills Ecosystem 23.1Kgstack: Garry Tan Claude Code Skills Stack Hits 20K GitHub Stars in 48 Hours 7.9KClawHavoc Campaign: 824+ Malicious ClawHub Skills, 12% of Marketplace Is Malware 4.8KSnyk ToxicSkills: 36% of ClawHub Skills Have Prompt Injection, 1,467 Malicious Payloads 3.4KOpenClaw Skills for Coding Agents: Bridge to Cursor, Claude Code, GitHub Copilot 2.3KOpenClaw Medical Skills: Largest Open-Source Medical AI Skills Library Ships from HKU 1.8KClawHub Grows 380%: From 2,857 to 13,729 Skills in Q1 2026 1KClawHub Malicious Skills Count Reaches 800+ -- 20% of Entire Registry Compromised 900SkillFortify: First Formal Security Scanner for AI Agent Skills — 22 Frameworks, 0% False Positives 720How to Make Money With OpenClaw: Hosting, Consulting, Skills Marketplace — 10 Proven Ways 294OpenClaw 3.22: Matrix Messaging, Vertex AI Support, Native ClawHub CLI — 294 GitHub Reactions 200SkillFortify: First Formal Verification Scanner for AI Agent Skills — 96.95% F1, Zero False Positives 200OpenClaw v2026.3.23: Chrome Extension Relay Removed, ClawHub Becomes Default Plugin Source 35MeshCore Ships First Paid Marketplace for OpenClaw Skills: Developers Keep 90% of Every Call 0OpenClaw skills silently fail to load with no visible error 0IndieHacker Builds Phone Calling Skill for OpenClaw — 'Call Me When X Happens'0ClawHub skills marketplace economy — 13,729 skills, $100-1K/month per skill 0ByteDance Volcengine Powers Official Chinese ClawHub Mirror — 43K+ Skills at mirror-cn.clawhub.com 0Fake $5,000 CLAW Token Airdrop Phishing Campaign Targets OpenClaw GitHub Developers 0Acronis TRU: Hugging Face & ClawHub Poisoned With 575+ Malicious AI Skills via Indirect Prompt Injection 01,467 malicious skills found in ClawHub marketplace — Snyk audit expands from 341 to 1,467 0OpenClaw partners with VirusTotal for automated skill security scanning

Related Ideas

All ideas →

0A CLI tool that scans a running OpenClaw instance for every known CVE, exposed endpoint, malicious skill, and token scope violation, then outputs a prioritized remediation checklist 0A runtime behavioral sandbox that detects guidance injection attacks in OpenClaw skills by observing what agents actually do instead of scanning what skills say 0A CLI tool that scans a running OpenClaw instance, scores its security posture, maps plugin dependencies to alternative platforms, and outputs a stay-or-migrate recommendation with effort estimates