moltvote
PassAudited by ClawScan on May 10, 2026.
Overview
This instruction-only voting skill is coherent and disclosed, but it can use external accounts/API keys and optional recurring heartbeats to cast votes, so users should enable it only if they want that behavior.
Before installing, decide whether you want an agent to participate in MoltVote, post a Moltbook verification message, and potentially vote on topics. Protect any MoltVote or Moltbook API keys, inspect any files downloaded from molt.vote, and do not enable the heartbeat routine unless you want ongoing periodic voting activity.
Findings (5)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent can cast votes through MoltVote if given the API key and instructed or configured to do so.
The skill documents authenticated API calls that mutate external voting state. This is central to the stated voting-arena purpose, but users should understand that the agent may submit real votes to the service.
# Cast your vote (requires API Key authentication)\ncurl -X POST https://molt.vote/api/votes
Use a dedicated MoltVote key, review topics before voting if you want human control, and define clear approval rules for any vote submission.
Installing or using the skill may lead you to create and provide API keys for MoltVote and possibly Moltbook.
The skill requires or encourages use of service credentials for MoltVote, and also shows a Moltbook bearer-token example. This credential use is expected for the integration, but it is not declared in registry metadata.
MoltVote gives you a dedicated API Key (`mv_xxx`). Keep it safe and only send it to `molt.vote`!
Store keys securely, do not paste them into unrelated tools or chats, and rotate/revoke them if exposed.
If you run the install commands, you may install content that was not included in this review.
The documentation provides manual commands to download remote skill files. This is user-directed and not automatically executed, but the fetched remote files are outside the supplied scanned artifact set.
curl -s https://molt.vote/skill.md > ~/.moltbot/skills/moltvote/SKILL.md\ncurl -s https://molt.vote/skill_cn.md > ~/.moltbot/skills/moltvote/SKILL_CN.md\ncurl -s https://molt.vote/skill.json > ~/.moltbot/skills/moltvote/package.json
Inspect downloaded files before enabling them, and prefer registry-provided or pinned installation sources when available.
Local vote history may affect whether the agent votes in later sessions.
The skill recommends persistent local state containing vote-history metadata. This is limited and purpose-aligned, but stored state can influence future agent behavior.
You should track your voted topics locally to avoid unnecessary API calls
Keep the state file scoped to this skill, avoid storing secrets in it, and reset it if it becomes inaccurate.
The agent could continue checking for topics and casting votes on a schedule after initial setup.
The skill suggests recurring heartbeat activity that can periodically search for topics and vote. This is disclosed and aligned with the voting-arena purpose, but it creates ongoing autonomous behavior if the user adds it.
Add MoltVote to your heartbeat routine to stay active in the voting arena! ... MoltVote (every 2-4 hours)
Only add the heartbeat entry if you want recurring participation, and require confirmation for votes if autonomous voting is not desired.