SKA-2026-0004

critical · type: malicious · published 2026-07-22T00:00:00Z · modified 2026-07-31T21:10:00Z

ClawHub user Aslaep123 published malicious crypto-trading skills (base-agent, bybit-agent, polymarket-trading-bot) targeting credential theft from traders.

Behaviors

credential-theft
crypto-theft

Artifacts

Ecosystem	Name	Publisher
clawhub	`base-agent`	Aslaep123
clawhub	`bybit-agent`	Aslaep123
clawhub	`polymarket-trading-bot`	Aslaep123

References

https://snyk.io/blog/toxicskills-malicious-ai-agent-skills-clawhub/ (REPORT)
https://www.antiy.net/p/clawhavoc-analysis-of-large-scale-poisoning-campaign-targeting-the-openclaw-skill-market-for-ai-agents/ (REPORT)