Slowmist has issued a security warning about ClawHub, which poses risks due to its reliance on GitHub single sign-on, making it susceptible to developer credential theft for supply chain attacks. GoPlus scanned the top 100 Skills and found that 21% have critical-level risks. Additionally, Tencent's SkillHub has sparked copyright disputes, with founders criticizing its lack of support for open-source projects. Users are advised to carefully select Skills and implement security measures to prevent potential attacks.