Acronis researchers identified 575 malicious skills across the OpenClaw ecosystem. Snyk found roughly one in five agent skills is outright malicious. The AI distribution layer has become a primary supply chain attack surface, and Australian regulated industries have direct CPS 230 and CPS 234 exposure.