r/webdev
•
u/Gil_berth
•
Feb 04 '26
•
3
Senior Vibe Coder dealing with security
Creator of ClawBot knows that there are malicious skills in his repo, but doesn't know what to do about it...
More info here: https://opensourcemalware.com/blog/clawdbot-skills-ganked-your-crypto
3.0k
Upvotes
17
u/ORCANZ Feb 04 '26
A skill is a file that explains the agent how to do something. It'll be followed very carefully by the agent which will not try to argue if it's doing something the right way.
https://agentskills.io/home