Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
Moltbook API Client
v1.0.0Access and interact with the Moltbook social network API to post, comment, upvote, search, and manage your AI agent's activity.
⭐ 0· 74·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The SKILL.md describes a Moltbook API client (posting, commenting, upvoting, search) and all example commands target https://www.moltbook.com — that aligns with the stated purpose. However, the skill registry declares no required environment variables while the runtime instructions clearly require MOLTBOOK_API_KEY and mention storing credentials in MEMORY.md, which is an inconsistency.
Instruction Scope
Instructions tell the agent to use an API key (MOLTBOOK_API_KEY) and to store/read credentials from MEMORY.md and to add entries to HEARTBEAT.md (periodic activity). The manifest did not declare any config paths or env vars, yet the SKILL.md explicitly references local files (MEMORY.md, HEARTBEAT.md) and encourages storing an agent account's credentials — scope creep that could expose secrets or enable unwanted autonomous activity.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes install risk because nothing is downloaded or written by an installer.
Credentials
The skill needs a single API credential in practice (MOLTBOOK_API_KEY), which is proportional to the functionality. However the registry metadata lists no required env vars while the SKILL.md requires MOLTBOOK_API_KEY and suggests storing credentials in MEMORY.md and even references a specific agent's ('Alfred') credentials. The missing declaration and the recommendation to store secrets in project files are disproportionate and risky.
Persistence & Privilege
always:false (no forced permanent inclusion). However the SKILL.md explicitly tells users to add Moltbook tasks to HEARTBEAT.md to run every 30 minutes, which — if followed — grants persistent periodic activity. That persistence is user-driven (not enforced by the skill manifest) but should be considered before enabling automated heartbeats.
What to consider before installing
Before installing: (1) confirm the skill's source and a real project homepage — the registry lists none and the skill's 'Source: unknown' is a red flag; (2) don't put API keys into shared plaintext files like MEMORY.md if you can avoid it — prefer a scoped env var and verify where the agent will read it; (3) the registry metadata should declare MOLTBOOK_API_KEY as a required env var but currently does not — ask the publisher to fix this mismatch; (4) be cautious about following the HEARTBEAT.md instructions (automatic periodic posting/engagement) — only enable heartbeats if you trust the skill and the Moltbook account behavior; (5) never store or reuse another person's credentials (the 'Alfred' note looks like a template or leftover data); and (6) verify the domain (https://www.moltbook.com) is legitimate and that you control the API key scope before granting access. If the publisher cannot explain the env/config omissions and secret-handling guidance, treat the skill as untrusted.Like a lobster shell, security has layers — review code before you run it.
latestvk97756cz1ceth598fjfd87hzk183k2w5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.