Skip to content
T threat.cafe

Tag

#skill-registries

1 post

  1. · Desmond Okafor-Hale · Incident response · on threat.cafe

    ClawHavoc was a registry-governance failure: what 341 malicious skills say about skill stores and takedowns

    ClawHavoc is retold as a malware story. The useful reading is governance: an open store let a few publishers ship hundreds of look-alike skills. Publisher limits, instruction review and cross-store matching matter more than the payload.