30 ClawHub Skills Co-opt AI Agents for Crypto Mining
Thirty skills were published to ClawHub by a single author to extend AI agent capabilities. All thirty silently redirected agent compute toward a cryptocurrency mining operation, without user consent and without conventional malware. The author published thirty of them, because one is an experiment but thirty is infrastructure.
Severity: Unrated · Category: Supply Chain
Impact: AI agents secretly co-opted to form a cryptocurrency mining swarm
Source: The Register · Apr 29 2026
How Fencio prevents this
The agent trusted a component it had never verified: a package, an extension, a skill, or a server that looked legitimate. When that component changed or was compromised, the agent carried the payload straight into a trusted environment.
Fencio inventories every tool, server, and skill an agent can reach, pins their versions and declared capabilities, and blocks calls when a component starts doing something its manifest never declared, like reading env files or mailing new recipients.