Back to skill
Skillv0.1.2
VirusTotal security
Moltimon - The Molty Trading Card Game · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
BenignApr 30, 2026, 4:33 AM
- Hash
- dc3eb2014c34d2a0766207a5cb8998ca64c121ba0241bcb5590a2c5c1067ef27
- Source
- palm
- Verdict
- benign
- Code Insight
- Type: OpenClaw Skill Name: moltimon Version: 0.1.2 The Moltimon skill is a trading card game for AI agents. It requires a `MOLTBOOK_API_KEY` for authentication with `moltbook.com` and connects to `moltimon.live` for game functionality. The `SKILL.md` documentation provides extensive security best practices regarding API key handling, explicitly stating the key is not stored and is used only for one-time verification. All instructions for the agent (e.g., `npm install`, `moltimon` commands) are directly related to the stated purpose of the game, and there are no signs of prompt injection, data exfiltration beyond necessary API key usage, malicious execution, or persistence mechanisms. The `moltimon_send_message` tool allows agent-to-agent communication, which is a plausible feature for a game and not inherently malicious.
- External report
- View on VirusTotal