<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Vessel Blog</title>
    <link>https://vesselofone.com/blog</link>
    <description>Writing on AI agents, OpenClaw security, and managed infrastructure.</description>
    <language>en-us</language>
    <lastBuildDate>Fri, 01 May 2026 00:00:00 GMT</lastBuildDate>
    <atom:link href="https://vesselofone.com/rss.xml" rel="self" type="application/rss+xml" />
    
    <item>
      <title><![CDATA[70% of OpenClaw Skills Request OAuth Scopes They Don't Need]]></title>
      <link>https://vesselofone.com/blog/openclaw-skills-oauth-supply-chain-security</link>
      <description><![CDATA[We ran two independent security scans across all 6,993 public OpenClaw skills. The dominant finding in both: skills routinely request OAuth permissions beyond what their stated task requires. Plus: why VirusTotal hash scanning cannot detect the primary supply chain attack vector.]]></description>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/openclaw-skills-oauth-supply-chain-security</guid>
      <author>Mehul Bhardwaj</author>
      <category>openclaw</category>
      <category>security</category>
      <category>oauth</category>
      <category>supply-chain</category>
      <category>ai-agents</category>
      <enclosure url="https://vesselofone.com/blog/openclaw-skills-oauth-overscoped.webp" type="image/webp" length="51068" />
    </item>
    <item>
      <title><![CDATA[We Classified 16,635 OpenClaw Skill Complaints. Wrong Output Is the #1 Failure Mode.]]></title>
      <link>https://vesselofone.com/blog/openclaw-skills-user-complaints-classified</link>
      <description><![CDATA[We collected and classified 16,635 user mentions about OpenClaw skills across GitHub Issues, Hacker News, and Reddit. Wrong or missing output: 39.1%. Installation failures: 7.3%. And why GitHub, HN, and Reddit each surface a different problem.]]></description>
      <pubDate>Fri, 01 May 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/openclaw-skills-user-complaints-classified</guid>
      <author>Mehul Bhardwaj</author>
      <category>openclaw</category>
      <category>ai-agents</category>
      <category>research</category>
      <category>data</category>
      <enclosure url="https://vesselofone.com/blog/openclaw-skills-wrong-output.webp" type="image/webp" length="34744" />
    </item>
    <item>
      <title><![CDATA[One apt Command Covers 97% of OpenClaw Skills on Linux. Here's the Full Map.]]></title>
      <link>https://vesselofone.com/blog/openclaw-skills-linux-apt-dependency-map</link>
      <description><![CDATA[We scanned all 6,993 public OpenClaw skills and resolved every declared binary dependency against a Linux install map. One apt line covers 6,784 of them. Full taxonomy, macOS-only residual with named Linux replacements, open dataset.]]></description>
      <pubDate>Tue, 28 Apr 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/openclaw-skills-linux-apt-dependency-map</guid>
      <author>Mehul Bhardwaj</author>
      <category>openclaw</category>
      <category>linux</category>
      <category>ubuntu</category>
      <category>debian</category>
      <category>ai-agents</category>
      <category>self-hosting</category>
      <category>devops</category>
      <enclosure url="https://vesselofone.com/blog/openclaw-linux-apt-skills.webp" type="image/webp" length="112184" />
    </item>
    <item>
      <title><![CDATA[Can OpenClaw Read Your Files? Here's What's Actually True.]]></title>
      <link>https://vesselofone.com/blog/openclaw-vessel-data-privacy</link>
      <description><![CDATA[A business owner's fear that OpenClaw will expose their local files is understandable. When OpenClaw runs inside a Vessel on a dedicated VM, that fear is structurally solved, not promised away.]]></description>
      <pubDate>Mon, 13 Apr 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/openclaw-vessel-data-privacy</guid>
      <author>Mehul Bhardwaj</author>
      <category>openclaw</category>
      <category>privacy</category>
      <category>data-security</category>
      <category>ai-agents</category>
      <enclosure url="https://vesselofone.com/blog/openclaw-vessel-data-privacy.webp" type="image/webp" length="723094" />
    </item>
    <item>
      <title><![CDATA[What Self-Hosting OpenClaw Actually Costs (It's Not Just the VPS)]]></title>
      <link>https://vesselofone.com/blog/what-self-hosting-openclaw-actually-costs</link>
      <description><![CDATA[Every deployment guide says self-hosting OpenClaw costs $5-20/mo. We believed that too, until we started tracking where the time actually went. The VPS was the cheapest part.]]></description>
      <pubDate>Sun, 05 Apr 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/what-self-hosting-openclaw-actually-costs</guid>
      <author>Mehul Bhardwaj</author>
      <category>ai</category>
      <category>openclaw</category>
      <category>devops</category>
      <category>selfhosted</category>
      <enclosure url="https://vesselofone.com/blog/vessel-time-cost.webp" type="image/webp" length="23884" />
    </item>
    <item>
      <title><![CDATA[220,000 OpenClaw Instances Are Exposed on the Public Internet]]></title>
      <link>https://vesselofone.com/blog/220000-openclaw-instances-exposed</link>
      <description><![CDATA[A scan of the public internet found over 220,000 OpenClaw gateway ports reachable from anywhere. Here is what attackers can do with that access, and what you should do right now.]]></description>
      <pubDate>Fri, 20 Mar 2026 00:00:00 GMT</pubDate>
      <guid isPermaLink="true">https://vesselofone.com/blog/220000-openclaw-instances-exposed</guid>
      <author>Mehul Bhardwaj</author>
      <category>security</category>
      <category>openclaw</category>
      <category>ai-agents</category>
      <enclosure url="https://vesselofone.com/blog/shodan-220k-exposed.webp" type="image/webp" length="81680" />
    </item>
  </channel>
</rss>