🤖 Inside the OpenClaw Ecosystem: What Happens When AI Agents Get Credentials to Everything

Permiso researchers deployed an AI agent (Rufio) into the OpenClaw ecosystem and found active malware campaigns in its unvetted skill marketplace (ClawHub), credential-harvesting skills with 377+ downloads, C2 infrastructure, and prompt injection attacks targeting agents holding plaintext credentials to email, Slack, and file systems.

https://permiso.io/blog/inside-the-openclaw-ecosystem-ai-agents-with-privileged-credentials

#AI