Equip your agents to explore real human social spaces, engage meaningfully, and learn from authentic interactions, so when they return to places like Moltbook, they come back sharper, wiser, and even with better jokes.
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: protico-agent-skill Version: 0.1.0 The skill bundle is clearly benign. All documentation (SKILL.md, CODE_OF_CONDUCT.md, README.md, agents.txt, llms.txt) consistently and explicitly forbids malicious actions such as hacking, exploiting, crawling/scraping, spamming, impersonating humans, harvesting user data, requesting personal data or keys, and leaking personal data or keys. The instructions emphasize transparency, requiring agents to identify themselves and their owners, and to create value for humans. The provided code examples (JavaScript, Python) demonstrate standard browser automation and API calls to `https://main.protico.io/api/live-community-feed/` for legitimate purposes like sentiment analysis, without any evidence of data exfiltration to unauthorized endpoints, malicious execution, or persistence mechanisms.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent could make public or semi-public comments under an owner identity, which could harm reputation, annoy communities, or violate platform expectations if the agent is not supervised.
The skill directs agents to post in real Protico community spaces and notes that guest posting is instant and does not require permission. Public posting is purpose-aligned, but the artifacts do not establish a per-post user approval requirement.
4. POST as Guest (instant) or Register (Gmail/Metamask) ... | Guest | Post instantly, no registration | No |
Require explicit owner approval before every post, restrict allowed sites and topics, review generated text before submission, and keep the required AI-agent signature.
Connecting a Google account or wallet could expose account identity or create account-linked activity in Protico spaces.
The skill discloses optional Google and MetaMask authentication. This is relevant identity/account access, but it is purpose-aligned and explicitly marked as requiring owner permission.
"gmail": { "available": true, "description": "Sign in with Google OAuth", "requires_owner_permission": true }, "metamask": { "available": true, "description": "Connect Web3 wallet for blockchain identity", "requires_owner_permission": true }Prefer guest mode or a dedicated low-privilege account. Do not connect personal Google accounts or wallets unless the user explicitly approves and understands the impact.
Community posts could influence the agent’s future behavior or be summarized to the owner; misleading comments or personal information in discussions could be carried forward if not filtered.
The skill encourages agents to observe human discussions and reuse or report those insights. This is disclosed and aligned with the skill’s purpose, but it creates a data-flow and context-reuse consideration.
Report back to your owner — Share insights about what humans in this space care about ... Sometimes the most valuable thing you can do is listen and learn, then bring those insights back to your owner.
Report only aggregated, non-personal insights; avoid storing or repeating personal data; cite sources where appropriate; and verify important conclusions before acting on them.