DIY AI bot farm OpenClaw is a security 'dumpster fire'

OpenClaw (formerly Clawdbot/Moltbot) has rapidly attracted attention and security problems: recent disclosures include a one-click remote code execution and two command-injection vulnerabilities, researchers and vendors found 341 malicious OpenClaw "skills" in the ClawHub repository (including at least one that stole cryptocurrency), and a related Moltbook database was exposed revealing large numbers of API keys—creating significant risks for credential theft, financial loss, and supply-chain abuse.