Hackers Exploiting ClawHub Skills to Bypass VirusTotal Detections via Social Engineering