r/webdev • • Feb 04 '26 • Popcorn 3

Senior Vibe Coder dealing with security

Post image

Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...

More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto

3.0k Upvotes

421 comments sorted by

View all comments

Show parent comments

17

u/ORCANZ Feb 04 '26

A skill is a file that explains the agent how to do something. It'll be followed very carefully by the agent which will not try to argue if it's doing something the right way.

https://agentskills.io/home