News for hackers. Stuff that matters.

jensec

Re:Is Web3 hype dead now? on Wednesday March 18, 2026 @02:07PM (#47429164)
wasn't/isn't Openclaw useful?
1. The skill are processed on an internal engine which runs on three things; skills.md, VirusTotal scanning,LLM Source scanning, Dev reputation, Skill installs and running regex detections and crafting overall safety score in most accurate and least noisy way possible. I agree there will be scope for improvement

2. pattern matching and trying to match the purpose of skill, do you have any suggestion for me?

3. We have launched a skill here that you can install and provide our token and you will be able to see your instance security in the dashboard

I am a web security researcher and bug bounty hunter and felt like this is something we all needed when running OpenClaw skills and instances. Completely free and runs LLM on public source code.

Show HN: Clawned.io Crowdsource public security scanner for OpenClaw skills

https://clawned.io

Hey HN, I built Clawned because I got mass downloading OpenClaw skills without reading a single SKILL.md. That felt stupid.Turns out a lot of them are stupid and unsafe too having reverse shells, credential theft, prompt injection buried in configs people(and myself) blindly trust.Clawned scans any skill before it touches your machine. 60+ threat patterns. Sub-2s. No signup. Paste a name or URL...

( Read More... | 4 comments | on HN )

I built a free Chrome extension security scanner now Fortune 500 teams use it

Built this to speed up my own bug bounty workflow. Got tired of manually pulling apart .crx files to check what permissions extensions were asking for and why.Paste a Chrome Web Store URL, it analyzes the extension and flags sketchy stuff. Added an LLM layer that catches things grep can't.Made it free, mass awareness helps find more vulns. 20k+ people use it now, then random enterprise security...

( Read More... | 1 comment | 2 points | on HN )