1Password didn't mince words
> If you have already run OpenClaw on a work device, treat it as a potential incident and engage your security team immediately. Do not wait for symptoms. Pause work on that machine and follow your organization’s incident response process.
1password.com/blog/from-ma...
From magic to malware: How OpenClaw's agent skills become an attack surface | 1Password
The same capabilities that make OpenClaw a groundbreaking tool also make it an urgent security risk. This blog contains confirmed examples of agent skills being used as malware vectors, and advice on ...