GoPlus Security has issued a critical alert regarding a vulnerability in OpenClaw's ClawHub skill repository. Discovered by Silverfort researchers, the flaw allows attackers to bypass security mechanisms and inflate download counts to over 20,000 using a single curl request. This manipulation can elevate malicious skills to top search rankings, potentially leading to the installation of harmful software that steals sensitive data, including crypto wallets and API keys. The vulnerability was patched within 24 hours, but GoPlus cautions users that high download counts do not guarantee security. They recommend employing AgentGuard for enhanced security scanning and protection against such threats.