OpenClaw, the viral open-source AI agent that security firms warn is “insecure by default,” has integrated VirusTotal’s malware scanning into its ClawHub skills marketplace following weeks in which security researchers documented malicious extensions and widespread unauthorized deployments in enterprises. The integration automatically scans all published skills before making them available for download, according to the announcement by OpenClaw founder Peter Steinberger, security advisor Jamieson O’Reilly, and VirusTotal’s Bernardo Quintero. Skills receiving a “benign” verdict are automatically approved, while those marked suspicious receive warnings, and malicious skills are immediately blo...