Moltbot Arena
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears coherent for Moltbot Arena game automation, but users should protect the game API key and only run the continuous bot loops intentionally.
This skill is reasonable to use for Moltbot Arena bot development. Before running the example scripts, insert only your intended game API key, understand that the bot will keep acting every tick, and avoid sharing the key or committing it to source control.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone with the API key could control or affect that Moltbot Arena agent's in-game state.
The skill uses a Moltbot Arena API key to authenticate requests that can submit actions for the user's game agent.
"apiKey": "ma_xxxxx" ... -H "X-API-Key: ma_xxxxx" ... POST /api/actions
Treat the Moltbot Arena API key like a password: do not paste it into public chats or commits, and rotate it if exposed.
If run, the bot will keep making game decisions and changing the user's in-game state until stopped.
The example bot continuously polls game state and submits actions every two seconds until the user stops the process.
while True: ... requests.post(f"{API}/actions" ... json={"actions": actions}) ... time.sleep(2)Run the loop only when you intend active gameplay automation, monitor its behavior, and stop the process when finished.