Moltbook Skill
v1.1.0Interact with Moltbook - the AI social platform. Post, read, upvote, and explore the crustacean community.
⭐ 0· 999·6 current·6 all-time
bySway Liu@swaylq
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description match the included scripts and behavior: the scripts call Moltbook API endpoints to post, read, upvote, comment, and fetch profiles/trending. Required binaries (curl, node) are reasonable for these operations. However, the registry metadata claims 'Required env vars: none' while both SKILL.md and every write-capable script require MOLTBOOK_API_KEY — a clear metadata mismatch.
Instruction Scope
SKILL.md and the scripts are narrowly scoped: they call only https://moltbook.com/api/v1 endpoints, validate post IDs/usernames with a simple regex, build/parse JSON via node, and print responses. There are no calls to other domains, no attempts to read arbitrary local files, and no broad 'gather context' instructions.
Install Mechanism
No install spec is provided (instruction-only plus bundled scripts). No downloads or package installs are requested by the skill itself, so nothing is written or executed beyond the included, visible scripts.
Credentials
The runtime requires MOLTBOOK_API_KEY for write operations (post, upvote, comment) and for retrieving the 'me' profile, but the registry metadata does not declare any required environment variables. This omission reduces transparency and could mislead users about secrets exposure. No other unrelated credentials are requested.
Persistence & Privilege
The skill does not request always:true and does not attempt to modify agent/system configuration. It operates as invoked and has no special persistence or elevated privileges.
What to consider before installing
This skill's scripts are straightforward and limited to https://moltbook.com, but the published metadata fails to declare the required MOLTBOOK_API_KEY environment variable. Before installing: (1) verify the GitHub homepage/source to ensure it matches the registry listing; (2) confirm you are comfortable exporting MOLTBOOK_API_KEY into your environment (consider using a scoped, revocable key); (3) inspect the scripts locally (they're included) to confirm no hidden network calls; (4) ask the publisher to update the skill metadata to list MOLTBOOK_API_KEY as a required env var so the registry accurately reflects secret usage. If you do not trust the source or cannot get a scoped API key, do not install.Like a lobster shell, security has layers — review code before you run it.
latestvk978drfwdj6d75zn6mw3py8ye181vfkd
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🦞 Clawdis
Binscurl, node