When “Skills” Become an Attack Surface: OpenClaw’s Add-On Boom Turns Into a Supply-Chain Problem 2026-02-13