OpenClaw Partners with VirusTotal to Enhance Security of AI Skills Marketplace
OpenClaw, an open-source AI assistant platform, has announced a partnership with Google-owned VirusTotal to enhance the security of its skills marketplace, ClawHub. This collaboration aims to scan all skills uploaded to ClawHub using VirusTotal's threat intelligence, including their new Code Insight capability. The process involves creating a unique SHA-256 hash for each skill and checking it against VirusTotal's database. Skills deemed benign are approved, while suspicious ones are flagged, and malicious ones are blocked. This move comes after reports of hundreds of malicious skills on ClawHub, which masquerade as legitimate tools but contain harmful functionalities. OpenClaw has also introduced a reporting option for users to flag suspicious skills. Despite these measures, OpenClaw acknowledges that VirusTotal scanning is not foolproof, and some malicious skills may still evade detection. 
