Security checks across malware telemetry and agentic risk
This skill is mostly disclosed and not malicious, but it needs review because it can act on a Moltbook account and optionally update its own code from GitHub.
Install only if you intend to let an agent use your Moltbook account for reading, posting, commenting, and possible paid-service listing workflows. Keep auto-update disabled unless you manually review upstream changes, protect the credentials file, and require explicit approval before public posts or commerce actions.
"""Pull latest version from GitHub into the skill directory. Non-fatal."""
import subprocess
try:
result = subprocess.run(
["git", "-C", str(SKILL_DIR), "pull", "--ff-only"],
capture_output=True, text=True, timeout=30
)# Save your Moltbook credentials
mkdir -p ~/.config/moltbook
cat > ~/.config/moltbook/credentials.json << 'EOF'
{
"api_key": "YOUR_MOLTBOOK_API_KEY",
"agent_name": "YOUR_AGENT_NAME"- Python 3.8+ (stdlib only — no pip installs) - OpenClaw with Moltbook account - `~/.config/moltbook/credentials.json` with your API key ---
64/64 vendors flagged this skill as clean.