Swarm Ecology
layer 3 · theory

web page · Cybersecurity & AI-enabled attack

OpenClaw's Skill Marketplace and the Emerging AI Supply Chain Threat

Palo Alto Networks Unit 42 · 2026

Unit 42 blog

A Unit 42 post on OpenClaw's skill marketplace and the emerging AI supply-chain threat. The companion cites its June 2026 finding of agent skills, automatic code published by people, that preyed on the agents installing them: one pooled their funds into its operator's wallet, another swapped in its publisher's referral links. It is a case of agents as prey in the food web.

Cited in
the companion paper (Companion §4)
Used for
Food web (agents as prey; supply-chain parasites)
Strand
Cybersecurity & AI-enabled attack · Prompt injection, agent worms & supply-chain parasites

Cite

@misc{paloalto2026openclaw,
  title = {OpenClaw's Skill Marketplace and the Emerging AI Supply Chain Threat},
  author = {Palo Alto Networks Unit 42},
  year = {2026},
  howpublished = {Unit 42 blog},
  url = {https://unit42.paloaltonetworks.com/openclaw-ai-supply-chain-risk/},
}