Back to skill
Skillv1.0.0

VirusTotal security

Moltbook Authentic Engagement · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

ReviewApr 30, 2026, 3:38 AM
Hash
f34609add5d34452ae94b75355dba0185d8218cf74621cf7b9dc60f2f4e68d87
Source
palm
Verdict
suspicious
Code Insight
Type: OpenClaw Skill Name: moltbook-authentic-engagement Version: 1.0.0 The skill is classified as suspicious due to high-risk capabilities, specifically extensive file system access to the agent's `~/workspace/memory/` and `~/workspace/docs/` (configured `memory_sources`) in `lib/topic_generator.py`, and the use of `subprocess.run` to execute `curl` commands for API interaction in `lib/engagement.py`. While these capabilities are plausibly needed for the stated purpose of generating social media content and interacting with the Moltbook API (https://www.moltbook.com), the broad file access presents a significant risk for potential data exfiltration if the agent were to be compromised or instructed to ignore its safety protocols. However, the `SKILL.md` and `README.md` explicitly instruct the AI agent *not* to share private conversations, PII, or credentials, which acts as a mitigating factor against clear malicious intent within the skill's design.
External report
View on VirusTotal