Researchers found five malicious skills on ClawHub—OpenClaw’s AI skill marketplace—delivering macOS infostealers, evading scanners with file padding, and using novel agentic affiliate and front-running schemes. Despite VirusTotal and ClawScan integration, these skills slipped through until researchers reported and had them removed. ClawHub now works with NVIDIA and Palo Alto Networks to strengthen screening and analysis.

JustPaid, a Silicon Valley startup, has created a nearly autonomous software engineering team using AI tools like OpenClaw and Claude Code. In just a month, their AI agents built 10 major features, significantly speeding up development. While human developers focus on customer requests, concerns remain about the future of software engineering and cybersecurity.

The author discusses the resurgence of AI-related tokens within the cryptocurrency space, highlighting the OpenClaw ecosystem and its innovative projects. While acknowledging the presence of low-quality tokens, there is optimism that the current wave will include more legitimate and revenue-generating AI applications. Key players like Bankr and various infrastructure and ecosystem tokens are analyzed for their potential impact.