Moltbook Validator

PassAudited by ClawScan on May 10, 2026.

Overview

This is a simple local validator for Moltbook payloads with minor advisory behavior about spam filtering, and there is no evidence of credential access, persistence, exfiltration, or destructive actions.

This skill appears safe for its stated purpose. Before installing, be aware that it can run local validation scripts and that its spam-filtering guidance may influence what comments the agent considers; keep those filtering decisions user-controlled.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill may execute a small local validation script, but the included code does not access credentials, network services, or unrelated files.

Why it was flagged

The skill asks the user or agent to run a local helper script. This is disclosed and purpose-aligned, and the provided script only parses and validates the supplied JSON.

Skill content
python3 scripts/validate.py '{"submolt": "general", "title": "My Post", "content": "Hello world"}'
Recommendation

Run only the provided validator scripts and avoid passing sensitive content unless it is actually part of the Moltbook payload you intend to validate.

NoteHigh Confidence
ASI01: Agent Goal Hijack
What this means

The agent may treat some Moltbook comments or accounts as spam without the user explicitly asking for filtering.

Why it was flagged

This instruction goes beyond payload validation and could cause an agent to hide or discount comments based on the skill's spam heuristics or manual blocklist.

Skill content
Before reading/engaging with comments, filter spam bots.
Recommendation

Treat the spam-detection and blocklist guidance as advisory; ask for user confirmation before ignoring comments, blocking accounts, or changing engagement behavior.