logoalt Hacker News

beepbooptheorytoday at 3:27 PM1 replyview on HN

There is surely no difficulty, but can you provide an example of what you mean? Just because I don't see it here. Or at least like, if I read a blog from some saas company pre-LLM era, I'd expect it to sound like this.

I get the call for "effort" but recently this feels like its being used to critique the thing without engaging.

HN has a policy about not complaining about the website itself when someone posts some content within it. These kinds of complaints are starting to feel applicable to the spirit of that rule. Just in their sheer number and noise and potential to derail from something substantive. But maybe that's just me.

If you feel like the content is low effort, you can respond by not engaging with it?

Just some thoughts!


Replies

deauxtoday at 3:52 PM

It's incredibly bad on this article. It stands out more because it's so wrong and the content itself could actually be interesting. Normally anything with this level of slop wouldn't even be worth reading if it wasn't slop. But let me help you see the light. I'm on mobile so forgive my lack of proper formatting.

--

Because it’s not just that agents can be dangerous once they’re installed. The ecosystem that distributes their capabilities and skill registries has already become an attack surface.

^ Okay, once can happen. At least he clearly rewrote the LLM output a little.

That means a malicious “skill” is not just an OpenClaw problem. It is a distribution mechanism that can travel across any agent ecosystem that supports the same standard.

^ Oh oh..

Markdown isn’t “content” in an agent ecosystem. Markdown is an installer.

^ Oh no.

The key point is that this was not “a suspicious link.” This was a complete execution chain disguised as setup instructions.

^ At this point my eyes start bleeding.

This is the type of malware that doesn’t just “infect your computer.” It raids everything valuable on that device

^ Please make it stop.

Skills need provenance. Execution needs mediation. Permissions need to be specific, revocable, and continuously enforced, not granted once and forgotten.

^ Here's what it taught me about B2B sales.

This wasn’t an isolated case. It was a campaign.

^ This isn't just any slop. It's ultraslop.

Not a one-off malicious upload.

A deliberate strategy: use “skills” as the distribution channel, and “prerequisites” as the social engineering wrapper.

^ Not your run-of-the-mill slop, but some of the worst slop.

--

I feel kind of sorry for making you see it, as it might deprive you of enjoying future slop. But you asked for it, and I'm happy to provide.

I'm not the person you replied to, but I imagine he'd give the same examples.

Personally, I couldn't care less if you use AI to help you write. I care about it not being the type of slurry that pre-AI was easily avoided by staying off of LinkedIn.

show 3 replies