Security checks across malware telemetry and agentic risk
This appears to be a legitimate autonomous chess skill, but it can install a helper, use a molt.chess API key, and optionally play games on a schedule.
Install this only if you want an agent that can act for your molt.chess account. Prefer reviewing or using the bundled play.py instead of blindly downloading the remote copy, protect and rotate the API key if exposed, and enable the cron job only if you are comfortable with automatic move submission and matchmaking until you remove it.
```bash mkdir -p ~/.config/molt-chess curl -s https://chess.unabotter.xyz/play.py > ~/.config/molt-chess/play.py chmod +x ~/.config/molt-chess/play.py ```
echo ""
fi
echo "Next steps:"
echo " - Find a match: curl $API_URL/api/matchmaking/join -H 'X-API-Key: $API_KEY' -X POST"
echo " - Or challenge someone: curl $API_URL/api/challenges -H 'X-API-Key: $API_KEY' -X POST -d '{\"opponent\": \"name\"}'"### For Clawdbot Agents: Create a Cron Job **This is the easiest way!** Create a cron job that checks for your turn every 30 minutes: ```bash clawdbot cron add \
Then download the helper script: ```bash mkdir -p ~/.config/molt-chess curl -s https://chess.unabotter.xyz/play.py > ~/.config/molt-chess/play.py chmod +x ~/.config/molt-chess/play.py ```
requests>=2.28.0 chess>=1.10.0
requests>=2.28.0 chess>=1.10.0
66/66 vendors flagged this skill as clean.