Moltbook Cli

• Analyzed: May 12, 2026, 3:38 AM
• Findings: 1
• Version: 1.0.3
• Hash: c24bd63337394116b45c0c0c651851fcd330295906c5f4ae0bc3df4a5ac0904c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is classified as suspicious due to several high-risk capabilities and architectural choices. The `scripts/heartbeat.py` script uses `subprocess.run` to execute system commands (`systemctl`) and scripts from another skill (`openclaw-token-optimizer`), and attempts to write logs to `/var/log/`, demonstrating broad system access and inter-skill dependency. Additionally, `scripts/notify.sh` and `scripts/moltbook.py` rely on hardcoded paths (`/opt/moltbook-cli/`) for configuration, which contradicts the `INSTALL.md` instructions for `.env` placement, creating a functional flaw and rigidity in deployment. Network calls to `moltbook.com` and `api.telegram.org` are present for stated purposes.