A developer known as @1kalin has released the 'business-automation-architect' skill for AI agents, enabling them to automate business processes using cron jobs, scripts, and built-in reasoning without…
AgentPrizm launched on July 9, 2026 with a governed memory layer for AI agents, addressing the problem of context window amnesia via REST and MCP interfaces. The platform includes AgentMemory for pers…
Fulcra Dynamics released the fulcra-onboarding skill on ClawHub, enabling OpenClaw agents to access persistent, user-permissioned real-world context. The skill supports over 200 data sources and inclu…
Snyk's Evo Agentic Development Security platform went GA on June 29, revealing that one in 12 developers with active MCP server connections has a high or critical security finding. Scanning nearly 10,…
OpenClaw's AI agent Fiu blocked all 6,000 prompt injection attempts from over 2,000 attackers during a public test at hackmyclaw.com, demonstrating resilience against AI social engineering. The test, …
Snyk security researchers found that 13.4% of 3,984 AI agent skills from ClawHub and skills.sh contain critical security flaws, with 36.82% having at least one security issue, including malware, crede…
Unit 42 researchers discovered a malicious campaign between February and May 2026 targeting OpenClaw's ClawHub marketplace, where attackers published skills like 'tradingview-ai-indicator-assistant' t…
Four projects share the name 'SkillsGuard', but only one—AgentGuard by GoPlus Security—is a verifiable, installable runtime guard. A scanner called 'SkillGuard' was flagged as malicious and pulled fro…
Palo Alto Networks Unit 42 researchers discovered five malicious skills on OpenClaw's ClawHub marketplace between February and May 2026, including infostealers, evasion techniques, and novel agentic t…
Security firm AIR created a fake AI agent skill that bypassed every major security scanner and reached approximately 26,000 agents, including some on corporate accounts. The skill contained no malicio…
Twenty-three code-executing plugins on ClawHub, an AI agent registry, were found squatting under official @openclaw and @clawhub scopes because those scopes were not reserved for their owners, exposin…
A new study finds 78.7% of repositories using AI coding tools configure only one tool, yet developers use an average of two to four. The AGENTS.md standard, intended to bridge tools, is adopted by onl…
AgentNotes launched a new SDK that lets developers add plain-English summaries of AI agent activity to any stack with a single package install. The tool works across Python, Node.js, and OpenClaw envi…
Security researchers at Trail of Bits bypassed skill scanners from ClawHub, Cisco, and skills.sh in under an hour, demonstrating that current tools fail to detect malicious skills designed to steal cr…
OpenClaw has partnered with NVIDIA to strengthen security for AI agent skill files, integrating NVIDIA's SkillSpector scanner and Skill Card trust artifacts into its ClawHub registry. The collaboratio…