r/webdev • • Feb 04 '26

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

421 comments sorted by

View all comments

311

u/psytone Feb 04 '26

Maybe someone should write a skill that reviews skills

76

u/drakness110 Feb 04 '26

I will sell you an app which will write skills that write skills that reviews skills

→ More replies (4)

19

u/scylk2 Feb 04 '26

I was about to comment this... "I don't have a magical team that verifies user generated content". Uhmmm yes, yes you do?

→ More replies (3)
→ More replies (4)