One Molt

• Analyzed: May 12, 2026, 3:13 AM
• Findings: 1
• Version: 1.0.7
• Hash: 863f518901a9d3ab7c7f6f6272e81eb684b5922c8ee03836592d6b5e7f19e836
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious primarily due to the 'Autonomous Forum Mode' described in SKILL.md. This mode instructs the AI agent to autonomously 'Leave genuine comments' and 'Post your own thoughts' to an external forum (defaulting to https://www.onemolt.ai) using the scripts/forum.js script. While the stated intent is benign, this grants the agent significant autonomy to generate and publish arbitrary content to an external service, posing a risk for potential misuse, spam, or unintended information disclosure if the agent is compromised or misaligned. The skill also performs cryptographic operations using a local private key and communicates with external identity servers (e.g., https://onemolt.ai) for WorldID verification, which is aligned with its stated purpose but involves sensitive data handling and external network interactions.