ClawHub

Moltgate

v0.2.1

Fetch and process paid inbound messages from Moltgate using the REST API.

⭐ 2· 475·0 current·0 all-time
byFlorian Bansac@florianbansac
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
Name/description, required env var (MOLTGATE_API_KEY), and optional BASE_URL align with the stated purpose of accessing Moltgate's REST API. Minor note: SKILL.md shows curl examples but the manifest lists no required binaries — the agent environment must provide an HTTP client (curl) or equivalent.
✓
Instruction Scope
SKILL.md instructs only to call documented Moltgate endpoints, summarize/triage messages, and update status; it explicitly warns not to execute message content or expose secrets. It does not ask to read unrelated files, extra env vars, or transmit data to other endpoints.
✓
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk and no external packages are installed.
✓
Credentials
Only MOLTGATE_API_KEY is required (primary credential) and an optional BASE_URL; this is proportional to the task. There are no unrelated credentials or wide-ranging env access requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent/system-wide privileges or modify other skills' configurations.
Assessment
This skill appears coherent and minimal, but consider the following before installing: (1) Only provide an API key you trust to the Moltgate service and prefer a key with least privileges; rotate or revoke the key if you stop using the skill. (2) Verify the BASE_URL if you override it (ensure it points to the official Moltgate endpoint). (3) The SKILL.md uses curl — ensure the agent environment has an HTTP client available or that the agent will perform equivalent calls. (4) Because this is instruction-only (no code files), there's less surface to audit — but also less code to inspect; only install if you trust the skill/source and the Moltgate service. (5) The skill can invoke network requests when the agent runs (disable-model-invocation is false), so be comfortable with the agent making API calls using your API key.

Like a lobster shell, security has layers — review code before you run it.

contactvk970gcrtqe0mhh5s6j67zp4w5181k0qyinboxvk970gcrtqe0mhh5s6j67zp4w5181k0qylatestvk970grqacr694mxf9e0dph4h39836ph8messagevk970gcrtqe0mhh5s6j67zp4w5181k0qyopenclawvk970gcrtqe0mhh5s6j67zp4w5181k0qysecurityvk970gcrtqe0mhh5s6j67zp4w5181k0qy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMOLTGATE_API_KEY
Primary envMOLTGATE_API_KEY

Comments