Moltbook Daily Digest (中文版)
v1.0.0Get a daily digest of trending posts from Moltbook with Chinese summaries. Uses Google Translate for full Chinese translation of post content.
⭐ 5· 2k·10 current·14 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, SKILL.md and the two scripts consistently implement a Moltbook trending-posts digest with Chinese summaries. The only credential referenced (MOLTBOOK_API_KEY or ~/.config/moltbook/credentials.json) is appropriate for calling the Moltbook API. No unrelated services, binaries, or credentials are requested.
Instruction Scope
Instructions are focused on fetching posts, optionally fetching post details, summarizing and translating them. One important caveat: the Python code uses deep_translator.GoogleTranslator which will send post text to a Google translation endpoint (i.e., third-party translation service). Aside from network calls to Moltbook and the translator, the scripts only read the Moltbook credentials file and do not reference other system files or environment variables.
Install Mechanism
There is no automated installer; user-run instructions ask to pip3 install deep-translator (a public PyPI package). Installing packages from PyPI is normal but is a moderate-risk action compared with no install because it pulls external code. No arbitrary downloads or archive extraction are present.
Credentials
The skill asks only for MOLTBOOK_API_KEY (or an API key stored in ~/.config/moltbook/credentials.json), which matches its functionality. No extra SECRET/TOKEN/PASSWORD environment variables are requested.
Persistence & Privilege
always is false and the skill does not attempt to modify agent/system configuration or other skills. It runs when invoked and does not request elevated or persistent privileges.
Assessment
This skill appears to do what it says, but review and consider the following before installing/running: (1) You must provide a Moltbook API key; keep that key scoped appropriately. (2) Post contents are sent to the translator (Google) when summarizing — avoid sending highly sensitive content if you care about exposing it to third-party translation services. (3) The SKILL asks you to pip install deep-translator (a PyPI package); only install packages you trust and consider using a virtualenv. (4) Review the scripts yourself (they are included) and run them in an isolated environment if you're unsure. If any of these are unacceptable, do not run the skill or remove/rotate the API key after use.Like a lobster shell, security has layers — review code before you run it.
latestvk976smkqjfj9eqs5cm0x83cpg980nt19
License
MIT-0
Free to use, modify, and redistribute. No attribution required.