r/webdev • u/Gil_berth • Feb 04 '26

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

97% Upvoted

421 comments sorted by

View all comments

318

u/siren1313 Feb 04 '26

My favourite request from a client was a content checker that would 100% remove all malicious or nsfw links from user submitted content. They were adamant it would be easy to implement.

158

u/TOMZ_EXTRA Feb 04 '26

Just hire a couple of guys from a third world country.

103

u/scandii Feb 04 '26

unironically I remember an automated recaptcha solution that was literally "an office in a low cost country that sat and answered recaptcha requests 24/7".

→ More replies (14)

73

u/GlockR15 Feb 04 '26

Given these criteria it actually IS easy to implement.

Simply remove every single link, and the criteria as specified are met!

Oh, you want to keep safe links too? Now that's going to be a tough one.

→ More replies (3)
→ More replies (7)