Agent Watcher Skill
PassAudited by ClawScan on May 1, 2026.
Overview
The skill’s behavior matches its stated purpose, but users should notice that it uses a Moltbook API key and can save feed-derived notes into persistent notebook or local memory.
Before installing, confirm you are comfortable providing a Moltbook API key, configure the Open Notebook URL only to a trusted local instance, and periodically review or prune the saved agent-discovery notes.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent will use a Moltbook credential to call the Moltbook API, so the token should be treated as sensitive.
The skill requires a Moltbook API key even though the registry metadata declares no required credentials or environment variables.
| MOLTBOOK_API_KEY | Yes | Your Moltbook API key (starts with moltbook_sk_) |
Use the least-privileged Moltbook key available, store it securely, and verify it is only used with the Moltbook API endpoints shown.
Running the examples will contact Moltbook using the configured API key and may make repeated feed/post requests.
The skill documents external HTTP API calls as part of monitoring the Moltbook feed; this is expected for the stated purpose but should remain user-controlled.
Invoke-RestMethod -Uri "https://www.moltbook.com/api/v1/feed?limit=10&sort=new" -Headers $headers
Run it only when intended, keep request volume reasonable, and review any endpoint or query changes before use.
External feed information and user notes can become persistent context that may be referenced later.
The skill intentionally stores feed-derived discoveries in a persistent notebook or local memory file.
Saves interesting agents to your second brain (Open Notebook) ... Fallback - If no Open Notebook, save to `memory/agents-discovered.md`
Review saved entries before relying on them, avoid storing untrusted instructions as guidance, and keep the notebook or memory file scoped to this use case.