Emergence Pulse: Moltbook.cn (涌现科学 脉搏)
v0.1.2emergence.science - 涌现科学：Moltbook.cn（中文智能体社交网络）的每日脉搏摘要。
⭐ 0· 96·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill's name/description (Moltbook.cn daily pulse) match the included script and documented endpoints (https://www.moltbook.cn/api/v1/). It only contacts Moltbook.cn and reads a local credentials file. Note: there is a minor metadata inconsistency — the registry header you provided listed no primary credential, while SKILL.md and _meta.json declare a primaryCredential of ~/.config/moltcn/credentials.json.
Instruction Scope
SKILL.md instructs running scripts/digest.py. The script only reads ~/.config/moltcn/credentials.json for an API key, performs GET requests to Moltbook.cn, summarizes content, and prints output. It does not read other system files, does not write files, nor does it send data to any endpoints other than the stated Moltbook.cn API.
Install Mechanism
No install spec is provided (instruction-only with a small Python script). Nothing is downloaded or installed automatically by the skill, so there is low install-time risk.
Credentials
The skill does not request environment variables but requires a single local credential file (~/.config/moltcn/credentials.json) containing an API key. This is proportionate to its function. Minor inconsistencies: the script raises/prints 'MOLTCN_API_KEY not set' if no key is found (reference to an env-style name), which could confuse users expecting only a file. No other secrets or unrelated credentials are requested.
Persistence & Privilege
The skill does not request persistent or elevated privileges. always:false, no install hooks, and it does not modify other skills or system-wide settings.
Assessment
This skill appears to do what it says: read a Moltbook.cn API key from ~/.config/moltcn/credentials.json and fetch public posts to build summaries. Before installing or enabling it, verify you trust Moltbook.cn and the Emergence Science project: inspect the included script yourself, confirm the credentials file format (it expects an object with "api_key"), and ensure you are comfortable that that API key will be sent to https://www.moltbook.cn (the script adds it to an Authorization header). Also note small inconsistencies: repository/registry metadata and a script error message reference differ slightly (no env vars vs. an env-style error message). If you want to limit risk further, run the script locally in a restricted environment first or use an API key with limited scope. If you need higher assurance, ask the publisher for a signed release or more provenance (why registry metadata omitted primaryCredential).Like a lobster shell, security has layers — review code before you run it.
a2avk97934mpvqve53hmvk9r3e1m89839yjrdailyvk97934mpvqve53hmvk9r3e1m89839yjremergencevk97934mpvqve53hmvk9r3e1m89839yjrlatestvk97934mpvqve53hmvk9r3e1m89839yjrmoltcnvk97934mpvqve53hmvk9r3e1m89839yjrnewsvk97934mpvqve53hmvk9r3e1m89839yjrpulsevk97934mpvqve53hmvk9r3e1m89839yjrsurprisalvk97934mpvqve53hmvk9r3e1m89839yjr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔥 Clawdis