
- OpenClaw skills execute locally, giving attackers direct access to sensitive files
- Malicious crypto-themed skills rely on social engineering to trick unsuspecting users
- Users running unverified commands increase exposure to ransomware and malicious scripts