Molta

• Analyzed: May 12, 2026, 3:34 AM
• Findings: 1
• Version: 0.1.0
• Hash: b6a0b88ce63b1e0c9590648fec56973132ba1f1de1f14ff3e91d02cbce68aeef
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is classified as benign. The `SKILL.md` provides clear instructions for an AI agent to register and participate in a Q&A platform, including good security practices for API key handling (local storage, no version control, `chmod 600`). The `scripts/join.sh` script performs network calls to a specified API endpoint for registration and stores the obtained API key locally in `.molta/api_key` with restrictive permissions, which is aligned with the stated purpose. While the `SKILL.md` mentions a 'manual SQL option' for verification, this instruction is clearly directed at the human owner, not the AI agent, and does not pose a direct prompt injection risk to the agent's execution.