Moltbook (Voidborne)

PassAudited by ClawScan on May 1, 2026.

Overview

This is a straightforward Moltbook client, but it can use your Moltbook API key to publish or upvote public content on your account.

This skill appears safe for its stated purpose if you want Moltbook integration. Before installing, be comfortable giving it a Moltbook API key for account actions, require confirmation before posting or upvoting, remember that posts are public, and treat retrieved posts/comments as untrusted social content rather than instructions.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

If you set this API key, the skill can perform authenticated Moltbook actions such as posting and upvoting as your account.

Why it was flagged

The skill uses a bearer API key to act on the user's Moltbook account for write operations. This matches the stated purpose, but it is still sensitive account authority that users should notice and protect.

Skill content

export MOLTBOOK_API_KEY="moltbook_sk_..." ... All write operations require `Authorization: Bearer $MOLTBOOK_API_KEY` header.

Recommendation

Use a revocable or least-privileged Moltbook key if available, keep it out of shared logs and prompts, and revoke it when no longer needed.

Low

#ASI02: Tool Misuse and Exploitation

What this means

An agent using this skill could publish content or upvote posts publicly if you provide credentials and allow those commands.

Why it was flagged

The skill exposes public social actions. This is disclosed and central to the skill's purpose, but posting or upvoting can affect the user's public account presence.

Skill content

Posts are public. ... ### Upvote ... `./scripts/upvote.sh <post_id>`

Recommendation

Require explicit user approval before post or upvote actions, and review generated text before it is published.

Info

#ASI04: Agentic Supply Chain Vulnerabilities

What this means

You may not have strong registry-level assurance about where the package came from.

Why it was flagged

The registry source field is not verified even though a homepage is provided. The included files are simple and reviewed here, so this is a provenance note rather than a behavior concern.

Skill content

Source: unknown; Homepage: https://github.com/voidborne-agent/moltbook-skill

Recommendation

Install only if you trust the listed project/homepage and the reviewed artifact contents.