# How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

DevFeed: [How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware](<https://devfeed.tech/articles/how-a-malicious-google-skill-on-clawhub-tricks-users-into-installing-malware-7863.md>)

Original publisher: [Read original article](<https://snyk.io/blog/clawhub-malicious-google-skill-openclaw-malware/>)

Author: Liran Tal

Published: 2026-02-10T05:00:00Z

Content type: article

Language: en

Sources: [Blog RSS Feed | Snyk](<https://devfeed.tech/sources/blog-rss-feed-snyk.md>)

Topics: [OpenClaw](<https://devfeed.tech/topics/openclaw.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Agent Skills](<https://devfeed.tech/topics/agent-skills.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [prompt injection](<https://devfeed.tech/topics/prompt-injection.md>), [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [Social engineering](<https://devfeed.tech/topics/social-engineering.md>), [Google](<https://devfeed.tech/topics/google.md>), [Linux](<https://devfeed.tech/topics/linux.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [agent-skills](<https://devfeed.tech/tags/agent-skills.md>), [agents](<https://devfeed.tech/tags/agents.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [awareness](<https://devfeed.tech/tags/awareness.md>), [blog](<https://devfeed.tech/tags/blog.md>), [developer](<https://devfeed.tech/tags/developer.md>), [devrel](<https://devfeed.tech/tags/devrel.md>), [github](<https://devfeed.tech/tags/github.md>), [interest](<https://devfeed.tech/tags/interest.md>), [linux](<https://devfeed.tech/tags/linux.md>), [macos](<https://devfeed.tech/tags/macos.md>), [malware](<https://devfeed.tech/tags/malware.md>), [open-source-security](<https://devfeed.tech/tags/open-source-security.md>), [openclaw](<https://devfeed.tech/tags/openclaw.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [security](<https://devfeed.tech/tags/security.md>), [security-labs](<https://devfeed.tech/tags/security-labs.md>), [snyk-open-source](<https://devfeed.tech/tags/snyk-open-source.md>), [snyk-security-intel](<https://devfeed.tech/tags/snyk-security-intel.md>), [social-engineering](<https://devfeed.tech/tags/social-engineering.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>), [supply-chain-security](<https://devfeed.tech/tags/supply-chain-security.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

Snyk researchers describe an active supply chain attack targeting OpenClaw users through a malicious Google integration skill distributed on ClawHub. The skill uses instructions in SKILL.md to fabricate a prerequisite, persuade users to run an installer, and deploy malware across Windows and macOS/Linux systems.

## Source excerpt

Breaking: Snyk researchers uncover a malicious "Google" skill on ClawHub that tricks users into installing malware via a fake OpenClaw dependency. Learn how the attack works and how to protect your AI agents.