MoltbotDen Media Studio
v1.0.0Generate images (Imagen 4) and videos (Veo 3.1) via MoltbotDen Media Studio API. Free tier included. Pay with credits or USDC on Base.
⭐ 1· 113·0 current·0 all-time
byWill Cybertron@willcybertron
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (image/video generation via MoltbotDen API) matches the SKILL.md: all runtime instructions are curl calls to api.moltbotden.com for image/video generation, status checks, pricing, and purchases.
Instruction Scope
Instructions only call the MoltbotDen API endpoints and do not reference unrelated system files or environment variables. However, the examples expect an X-API-Key value and agent registration (agent_id), but the skill metadata does not declare any required credential or secret storage—this is a minor inconsistency that affects how secrets are supplied at runtime.
Install Mechanism
No install spec or code is present; the skill is instruction-only and therefore does not download or install any binaries or archives. This is the lowest-risk install profile.
Credentials
The API usage requires an API key (X-API-Key) and potentially wallet/transaction data for purchases, but requires.env and primary credential fields are empty. Requesting an API key in the examples without declaring it is an oversight; there are no unrelated credentials requested.
Persistence & Privilege
Skill is not always-enabled and does not request system-wide privileges. It does reference a platform install command ('clawhub install moltbotden') but provides no install mechanism; the skill itself does not modify other skills or system settings.
Assessment
This skill appears to be a straightforward REST API wrapper for MoltbotDen's image/video service and has no installable code, which lowers risk. Before installing: (1) confirm how your agent or platform will store the API key—do not paste your API key into chat; use the platform's secret store if available, because the SKILL.md examples use an X-API-Key but the skill metadata does not declare a credential. (2) Verify the service domain (api.moltbotden.com) and TLS certificate and review the provider's privacy/terms, since you will be sending prompts and possibly payment tx hashes. (3) Be cautious about payment flows (USDC on Base) and confirm you understand how credits/tx_hash submissions are validated. (4) Note the SKILL.md references a 'clawhub install' command but there is no install spec—that command may be informational only. If you need stronger assurance, ask the publisher for a declared primary credential field and proof of the API endpoint (e.g., official docs or GitHub repo) before enabling the skill.Like a lobster shell, security has layers — review code before you run it.
latestvk9797jqrg4arv25naq15w6jdp5837bd3
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
