Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Speedtest

Test internet connection speed using Ookla's Speedtest CLI. Measure download/upload speeds, latency, and packet loss. Format results for social sharing on Moltbook/Twitter. Track speed history over time. Use when asked to check internet speed, test connection, run speedtest, or share network performance stats.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 2.3k · 4 current installs · 5 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the included scripts: both scripts run the Ookla Speedtest CLI, format results, save history, and optionally publish to social endpoints. Requiring the speedtest CLI (documented in SKILL.md) is coherent with the purpose.
Instruction Scope
Runtime instructions and the included scripts are narrowly scoped to running speedtests, formatting results, saving a JSONL history, and optionally posting to social sites. However, the social script will attempt network operations (curl POST to https://www.moltbook.com/api/v1/posts and invoking the bird CLI for Twitter). It also reads/writes files in the user's home directory (history at ~/.openclaw/data/speedtest-history.jsonl and Moltbook credentials at ~/.config/moltbook/credentials.json). Those behaviors are expected for 'social sharing' but should be highlighted because they involve reading a credentials file and transmitting data to external endpoints.
Install Mechanism
There is no install spec (instruction-only skill + included scripts). SKILL.md gives standard install instructions for the official Ookla packages (brew / packagecloud) which are reasonable and expected.
!
Credentials
Metadata declares no required credentials or environment variables, but the social script looks for ~/.config/moltbook/credentials.json and extracts an api_key to POST to Moltbook. It also expects the 'bird' CLI for Twitter posting (which will use whatever credentials bird has configured). The skill thus accesses user-stored credentials/config without declaring this in requires.env — a mismatch that users should be aware of.
Persistence & Privilege
The skill does not request permanent system presence (always:false) and only writes its own history file under ~/.openclaw/data. It does not modify other skills or system-wide settings. Note: the agent can invoke the skill autonomously by default (platform default) — combined with the credential-access behavior above, that increases the blast radius if the skill is invoked without user oversight.
What to consider before installing
This skill appears to be a legitimate speedtest + social-posting helper, but pay attention to the following before installing: - The social script will look for and read ~/.config/moltbook/credentials.json and will attempt to POST formatted results to https://www.moltbook.com via curl; it will also call the 'bird' CLI to tweet. Those behaviors are expected for sharing, but the metadata does not declare any required credentials — review and approve this explicitly. - Inspect ~/.config/moltbook/credentials.json to confirm it only contains the expected API key and is stored securely; if you don't use Moltbook or don't want automatic posting, remove or protect that file. - If you don't want any network posting, edit or remove the posting section of scripts/speedtest-social.sh (the Moltbook POST and bird tweet blocks) before using. - The scripts create/write ~/.openclaw/data/speedtest-history.jsonl; if that concerns you, change the path or audit the file contents periodically. - Install the Ookla Speedtest CLI only from the official sources mentioned in SKILL.md (brew / packagecloud) to avoid supply-chain risks, and review any third-party endpoints (moltbook.com) for trustworthiness. If you want this skill but want tighter control, either (a) run the scripts locally and verify behavior before enabling the skill for autonomous use, (b) remove or comment out the posting sections, or (c) ensure Moltbook/Twitter credentials are absent so posts cannot be made.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.1
Download zip
latestvk97etf75yrxqf4fcr2vrrx5jyn80d3rb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Speedtest Skill

Test your internet connection speed and share results with the agent community.

Quick Start

Run a basic speed test:

speedtest --format=json-pretty

Generate a social-ready post (with interactive prompt):

scripts/speedtest-social.sh

After running, you'll be prompted to publish to:

  • Moltbook
  • Twitter
  • Both
  • Skip

Track speed history:

scripts/speedtest-history.sh

What This Measures

  • Download speed - How fast you receive data
  • Upload speed - How fast you send data
  • Latency (ping) - Response time to servers
  • Packet loss - Connection reliability
  • Server location - Which test server was used

Use Cases

  1. Troubleshooting - "My connection feels slow"
  2. Monitoring - Track speed trends over time
  3. Social sharing - Post results to Moltbook/Twitter
  4. Comparison - See how your speed compares to past tests
  5. Infrastructure - Document your hosting setup

Social Posting

The skill formats results for easy sharing:

📊 SpeedTest Results
⬇️ Download: 250.5 Mbps
⬆️ Upload: 50.2 Mbps
⏱️ Latency: 12ms
📍 Server: San Francisco, CA
🚀 Status: Excellent

#SpeedTest #AgentInfra 🦞

Post this to Moltbook or Twitter to share your infrastructure stats with other agents!

Scripts

speedtest-social.sh

Runs speedtest and formats output for social media. Features:

  • Adds emojis based on performance
  • Generates hashtags
  • Includes status indicator (🚀 Excellent / ⚡ Good / 🐌 Slow)
  • Interactive prompt to publish results

Usage:

scripts/speedtest-social.sh                    # Interactive: asks where to publish
scripts/speedtest-social.sh --post-to-moltbook # Auto-post to Moltbook only

After each test, the script will ask:

📢 Would you like to publish these results?
   1) Moltbook
   2) Twitter
   3) Both
   4) Skip

This encourages regular sharing while giving you control!

speedtest-history.sh

Tracks speed test results over time:

scripts/speedtest-history.sh run    # Run test and save to history
scripts/speedtest-history.sh stats  # Show statistics (avg, min, max)
scripts/speedtest-history.sh trend  # Show recent trend

History is saved to ~/.openclaw/data/speedtest-history.jsonl

Performance Indicators

Download Speed:

  • 🚀 Excellent: 100+ Mbps
  • ⚡ Good: 25-100 Mbps
  • 🐌 Slow: < 25 Mbps

Latency:

  • 🎯 Excellent: < 20ms
  • ⚡ Good: 20-50ms
  • 🐌 Slow: > 50ms

Installation

The Ookla Speedtest CLI must be installed:

macOS:

brew tap teamookla/speedtest
brew install speedtest

Linux (Debian/Ubuntu):

sudo apt-get install curl
curl -s https://packagecloud.io/install/repositories/ookla/speedtest-cli/script.deb.sh | sudo bash
sudo apt-get install speedtest

Check installation:

speedtest --version

Common Queries

  • "Run a speed test"
  • "How fast is my internet?"
  • "Test my connection speed"
  • "Check download/upload speeds"
  • "Post my speed test results to Moltbook"
  • "Compare my speed to last time"

Notes

  • Speed tests use real bandwidth - avoid running during important downloads
  • Results vary by time of day and network load
  • Server selection can affect results (closer = usually faster)
  • Periodic posting creates an interesting dataset of agent infrastructure
  • Rate limit: Don't run tests more than once per 10 minutes

See Also

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…