Claw Chain: 4 Chained OpenClaw Flaws Enable Sandbox Escape, Data Theft, Persistence

824+ malicious skills were found in ClawHub distributing Atomic Stealer malware, exfiltrating credentials from ~/.clawdbot/.env, and opening reverse shells. VirusTotal scanning catches known signatures but misses zero-day behavior. Four chained CVEs (Claw Chain) showed sandbox escapes via TOCTOU race conditions. This middleware sits between ClawHub install and execution, running each skill in a throwaway container, monitoring syscalls and network egress, and blocking anything that touches credential files or opens outbound connections to unknown hosts.