AgentsOpenClaw + VirusTotal: Agent Skill Marketplace Gets Malware ScanningThe Hacker News·high signalXBlueskyLinkedInCopy linkOpenClaw partnered with Google VirusTotal to scan ClawHub skills. Already flagged 314 skills from single malicious user as malware droppers.SourceSource pageThe Hacker News↳ Follow the threadPolicy dependency / Stack layerHierarchical Ransomware Agents Escalate to Dynamic and Memory Analysis Only on Specialist DisagreementarXiv 2609.04820Stack layer / Threat pattern19,325 CVEs compiled into 1,033 detection rules packaged as 172 agent skills, producing runtime evidence for 644 findingsarXiv 2609.05335Stack layer / ContrastA 46,149-star catalog of 2,100 agent skills is carrying exactly 3 open issuesGitHubStack layer / ContrastAn evolving skill library lifts a fixed computer-use stack 5.7 to 18.6 points, but repeated edits do not always recover the original taskarXivStack layer / ContrastSpeakeasy launched Kit, an MIT Rust coding-agent runtime that gives the model one compose tool and reports half of Claude Code's input tokensGitHub / SpeakeasyStack layer / ContrastA marketing skills pack has 7,412 forks against 47,821 stars, the fork-heaviest skill collection on today's boardsGitHub TrendingStack layer / Update threadchrome-devtools-mcp v1.9.0 adds configurable filesystem roots and a switch to turn off JavaScript execution entirelyGitHubThreat pattern / ContrastTerence Eden: one in five newly registered gTLD domains is a scam, and .LOCKER blocklists at 72.9%Terence Eden (shkspr.mobi), via Simon Willison