Use case sources
Source reports and analysis supporting this case are listed below. AITBM interpretation and any indicative scoring are derived from this public evidence.
Incident overview
ClawHub accepted and listed two TradingView-themed OpenClaw skills with malicious prerequisite instructions; at least one received an audit Pass. The redirection led to a Base64-encoded command that fetched a cluw macOS infostealer from new infrastructure. Unit 42 says it reported five skills and OpenClaw removed them.
Why this analysis has no ERS
Unit 42 verified malicious TradingView-themed skills listed on ClawHub, one audit Pass, and the cluw payload. It did not identify an independent user installing or executing a skill in a bounded OpenClaw agent deployment. Marketplace admission is observed but does not establish an agent execution metric.
Status: Not scorable by design · Classification: Validated Research · source date 2026-06-24
AIDEFEND evidence routes
No AIDEFEND control evidence is assigned to this record.