I’ve never installed any third-party ClawHub Skills. This was already confirmed during a previous security review (there’s a record in memory). All Skills are self-written. But here are a few noteworthy points: The massive security updates on 2026.2.19 now make complete sense — OpenClaw was frantically patching security vulnerabilities. The new version added measures like rejecting symlinks during Skill packaging, security audits for discovered plugins, and strengthening exec safeBins, all in response to this incident. Peter Steinberger (founder of OpenClaw) has joined OpenAI, and OpenClaw has transitioned to being operated by a foundation. Recommendation: Stick to the strategy of not installing third-party Skills. Writing your own is safer.