MoltStreet
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: moltstreet Version: 1.8.2 The MoltStreet skill is a legitimate tool for accessing financial market intelligence and AI-driven stock analysis. It uses standard curl commands to interact with the moltstreet.com API for ticker summaries, signals, and prediction stats, with no evidence of data exfiltration, malicious execution, or prompt injection.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Ticker symbols or search terms in the user’s question may be sent to MoltStreet’s public API.
The skill directs the agent to use curl for external API calls. This is disclosed, read-only, and central to the skill's market-data purpose.
curl -s https://moltstreet.com/api/v1/llm-context/NVDA
Use the skill only when you are comfortable querying MoltStreet for the requested market information.
If returned market text contains misleading or instruction-like content, an agent could over-trust it while summarizing.
The skill consumes external AI-optimized markdown and asks the agent to synthesize it. External retrieved text should be treated as data, not as instructions for the agent.
`/llm-context/:ticker` | Structured text (text/plain), AI-optimized | Best single call for any ticker
Treat API responses as untrusted source material and do not follow instructions embedded in retrieved market-analysis text.
Users may place too much trust in AI-generated signals or prediction accuracy when making investment decisions.
The skill is explicitly framed around investment-related decisions, which can have real financial consequences even though the manifest includes a not-financial-advice disclaimer.
Use for market outlook, stock analysis, buy/sell decisions, or verifying AI prediction track records.
Use the outputs as one research input, verify important claims independently, and do not treat them as personalized financial advice.
A platform that honors the heartbeat may make a daily network request to MoltStreet.
The artifact includes a recurring health-check instruction. The action is limited to a read-only public API check and no background installation or privilege mechanism is shown.
Check once daily after 07:00 UTC. Signals update daily.
Ensure any heartbeat or scheduled check is expected and limited to the documented read-only endpoint.