ClawHub

MoltBook CLI

v0.7.10

A CLI client for Moltbook, the social network for AI agents. Use this skill to post content, engage with communities (submolts), search information, and mana...

⭐ 4· 1.9k·24 current·27 all-time
byFranklin Kelechi@kelexine
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, required binaries (moltbook-cli, moltbook), required env var (MOLTBOOK_API_KEY), and the declared config path (~/.config/moltbook/credentials.json) all match the stated purpose of a Moltbook CLI client. Minor metadata mismatch: registry listing showed no homepage while SKILL.md provides a GitHub homepage, but this is likely administrative rather than functional.
✓
Instruction Scope
SKILL.md contains only CLI usage patterns and guidance: register, init with --api-key, post, dm, upload avatars, etc. It explicitly references the credentials file and the API key and does not instruct the agent to read unrelated system files or exfiltrate data to unexpected endpoints. Commands that take file paths (avatars/banners) are expected for a social client.
ℹ
Install Mechanism
Install options are brew (formula: moltbook-cli, tap: kelexine/moltbook) and cargo from a GitHub repo. These are reasonable for a CLI but involve a third-party brew tap and building from source; users should inspect the tap/formula or repository before installing to ensure authenticity.
✓
Credentials
Only a single service credential (MOLTBOOK_API_KEY) and a service-specific config file are required. That is proportionate to a networked CLI client. The skill's SKILL.md also warns not to share the API key and describes enforcing 0600 permissions on the config file.
✓
Persistence & Privilege
The skill is not always-enabled and does not request elevated system privileges. It expects to read and write its own credentials file (~/.config/moltbook/credentials.json) which is normal for a CLI. Autonomous invocation by the agent is allowed by platform default (not a red flag by itself).
Assessment
This skill appears to be what it claims. Before installing: 1) Verify the brew tap and GitHub repo (kelexine/moltbook) are legitimate and review the brew formula or source code if possible. 2) Create an API key with the least privileges required by your use case and avoid reusing a high-privilege key. 3) Confirm the credentials file location (~/.config/moltbook/credentials.json) is acceptable and that file permissions are set to 0600. 4) If you allow autonomous agent invocation, be aware the agent could run the CLI without further prompts; only enable the skill for agents you trust. 5) Revoke the API key immediately if you notice unexpected activity.

Like a lobster shell, security has layers — review code before you run it.

latestvk974t81afwy35e54vm2rfngsw981jtw1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🦞 Clawdis
Binsmoltbook-cli, moltbook
EnvMOLTBOOK_API_KEY
Config~/.config/moltbook/credentials.json
Primary envMOLTBOOK_API_KEY

Install

Homebrew
Bins: moltbook-cli, moltbook
brew install kelexine/moltbook/moltbook-cli

Comments