The AI agent platform has added a Google-owned threat intelligence service to the ClawHub marketplace, following the discovery of 341 malicious skills and shadow IT deployments.

CSO Online offers insights into cybersecurity, risk management, and IT leadership, providing articles, reports, and expert analysis to help security professionals navigate the evolving threat landscape and protect their organizations from cyber attacks. By exploring CSO Online's curated content, CISOs, security managers, and IT executives can learn about threat intelligence, security frameworks, and incident response strategies for building resilient cybersecurity programs. Whether you're defending against ransomware, phishing attacks, or insider threats, CSO Online offers resources to strengthen your security posture and safeguard your digital assets.

CSO Online

OpenClaw, an open-source AI agent platform, has integrated VirusTotal malware scanning into its ClawHub marketplace after security researchers discovered 341 malicious skills and widespread unauthorized enterprise deployments. The integration automatically scans skills using VirusTotal's Code Insight powered by Google's Gemini, blocking malicious packages and warning about suspicious ones. However, the solution has significant limitations—it cannot detect prompt injection attacks or malicious natural language instructions. Security firms previously found that 22% of enterprises have unauthorized OpenClaw deployments, with Gartner recommending immediate blocking due to cybersecurity risks including exposed API keys and OAuth tokens.

OpenClaw integrates VirusTotal malware scanning as security firms flag enterprise risks