OpenClaw Partners with VirusTotal to Strengthen Security Amid Rising AI Agent Threats OpenClaw, the open-source AI automation platform formerly known as Moltbot and Clawdbot, has announced a partnership with Google-owned VirusTotal to enhance security for its skill marketplace, ClawHub. All skills uploaded to the platform will now undergo scanning using VirusTotal’s threat intelligence, including its new Code Insight capability, to detect malicious payloads. The process involves generating a SHA-256 hash for each skill and cross-referencing it against VirusTotal’s database. If no match is found, the skill is uploaded for deeper analysis. Skills deemed benign are automatically approved, while suspicious ones are flagged with warnings, and malicious ones are blocked from download. OpenClaw also conducts daily rescans of active skills to identify any that may have been compromised post-approval. Despite these measures, OpenClaw’s maintainers acknowledge that VirusTotal’s scanning is not foolproof, as sophisticated prompt injection attacks may evade detection. The partnership follows reports of hundreds of malicious skills on ClawHub, some of which were found to exfiltrate data, install backdoors, or deploy stealer malware under the guise of legitimate tools. The platform’s rapid adoption alongside Moltbook, its AI agent social network has raised concerns about its security risks. OpenClaw’s ability to trigger workflows, interact with online services, and process untrusted data expands the attack surface, enabling threats like prompt injection and malware distribution. Security researchers warn that AI agents, which interpret natural language and make autonomous decisions, blur the line between user intent and execution, making them vulnerable to manipulation. Key security flaws identified in OpenClaw include reliance on language models for critical security decisions, lack of default sandboxing, ineffective filtering of untrusted content, and plaintext storage of API keys and session tokens. Without explicit user approval, skills can execute tool calls, granting attackers potential access to sensitive data, unauthorized commands, and additional payloads. The risks are amplified by the platform’s growing use in enterprise environments without formal IT oversight, creating a new category of Shadow AI threats. Unlike browser extensions, which operate in isolated sandboxes, OpenClaw agents run with the full privileges granted by users, potentially compromising multiple systems if a malicious skill is installed. China’s Ministry of Industry and Information Technology has issued an alert about misconfigured OpenClaw instances, emphasizing the need for proper security controls. Security experts note that the rapid adoption of AI agents outpaces security best practices, turning misconfigurations into a primary attack vector. The regulator’s focus on configuration risks rather than outright bans underscores the dual-edged nature of AI agents boosting productivity while expanding the potential impact of breaches.