GoPlus: ClawHub has download volume counterfeiting vulnerabilities, popular skills or contains malicious code

According to a security alert issued by GoPlusSecurity, Silverfort security researchers have discovered a serious vulnerability in OpenClaw's skills warehouse, ClawHub. Attackers can bypass all protection mechanisms by calling the internal function downloads: increase, and can swipe the download volume to more than 20,000 times in a few minutes with just a curl request, thereby pushing skills containing malicious code to the first place in search rankings and inducing users or AIAgent to install automatically. Once used, malicious skills can steal sensitive data such as encrypted wallets and API keys. The vulnerability has been fixed within 24 hours. GoPlus reminds users that high downloads do not mean security, and recommends using AgentGuard for security scanning and protection.