The OpenClaw Hype: Analysis of Chatter from Open-Source Deep and Dark Web

**Executive summary:** OpenClaw, an AI-powered automation framework with a user-installable skills marketplace, contains critical security flaws (notably CVE-2026-25253 one-click RCE), un-sandboxed skill execution, and a wave of poisoned plugins that enable credential theft and remote code execution; while these represent a significant supply-chain risk, current evidence points to PoC-level exploitation and research-driven chatter rather than widespread criminal operationalization.