1. OpenClaw Security Gap: No Warning for Sideloaded Skills Creates 'APK-Style' Vulnerability
The OpenClaw AI agent framework currently lacks any security warning when users load skills from unofficial sources, creating a direct path for attackers to compromise systems. This design flaw treats all skill loading paths with equal trust, enabling a 'sideloading' vulnerability analogous to installing unverified APK...