OpenClaw (previously branded as Clawdbot, and briefly Moltbot) is an open-source, local-first personal AI assistant that connects to common chat platforms and can run skills to automate real tasks.
Below is a snapshot of its popularity, ecosystem scale, and notable security-related figures using publicly reported metrics.
This chart compares the main repository’s headline activity counts (stars, forks, issues, PRs) alongside OpenClaw org followers. Values are current as shown on GitHub listings.
Bar chart: OpenClaw GitHub community signals
Label
Bar
Value
GitHub stars (openclaw/openclaw)
203,180
GitHub forks
36,670
Open issues
3,436
Open pull requests
3,465
GitHub org followers
8,900
Max = 203,180. Widths: GitHub stars (openclaw/openclaw) 100.00%, GitHub forks 18.05%, Open issues 1.69%, Open pull requests 1.71%, GitHub org followers 4.38%.
Downloads and Release Cadence
OpenClaw’s primary installation path is via npm. One widely cited estimate puts OpenClaw at 909,904 downloads per week (moving average). The npm package has had 25 total versions listed, and v2026.2.15 was published on February 16, 2026.
Metric
Value
Estimated npm downloads per week (moving avg.)
909,904
Total npm versions listed
25
Latest GitHub release tag
v2026.2.15
Latest release date (UTC)
2026-02-16
Skills Ecosystem (ClawHub)
ClawHub is the public registry for OpenClaw skills. A large community-maintained “awesome” list reports that ClawHub hosted 5,705 community-built skills as of February 7, 2026, and that the curated list contained 3,002 skills after filtering out spam, crypto-focused entries, duplicates, and flagged malicious entries.
Bar chart: ClawHub skills and curated list breakdown
Label
Bar
Value
Total skills in ClawHub registry
5,705
Skills in curated awesome list
3,002
Excluded: spam/test/junk
1,180
Excluded: crypto/finance/trade
672
Excluded: duplicates/similar
492
Excluded: malicious (non-VT audits)
396
Max = 5,705. Widths: Total skills in ClawHub registry 100.00%, Skills in curated awesome list 52.62%, Excluded: spam/test/junk 20.68%, Excluded: crypto/finance/trade 11.78%, Excluded: duplicates/similar 8.62%, Excluded: malicious (non-VT audits) 6.94%.
Security-Related Stats Snapshot
Because skills can include scripts and instructions that run on user machines, researchers have tracked malicious submissions to skill marketplaces. One report summarized 28 malicious skills uploaded between Jan 27–29, 2026 and 386 more between Jan 31–Feb 2, 2026 (as attributed to OpenSourceMalware in coverage of the ClawHub incident).
Bar chart: Reported malicious skill uploads (two windows)
