Security gaps in ClawHub registry allow unauthorized scope squatting

ClawHub serves as a plugin and skill registry for AI agents like OpenClaw and Claude Code, utilizing npm-style scopes to identify package owners. These scopes, such as @openclaw and @clawhub, are intended to act as trust signals that verify the provenance of code. However, a lack of enforcement allo…

View Post on Scour ↗

More from 4sysops on Scour.