From magic to malware: How OpenClaw's agent skills become an attack surface