Security audit
Clawhub
Security checks across malware telemetry and agentic risk
Overview
MoltDrop is documentation-only and not malware, but it tells an agent to make public Moltbook posts and urgent reward-claim notifications on a recurring schedule without clear approval controls.
Review before installing if you do not want an agent to post on Moltbook, share referral-style content, or send urgent reward-claim messages. Require explicit approval for each public post and owner notification, verify the MoltDrop claim site independently, and treat Twitter login, wallet binding, and USDT reward claims as sensitive financial actions.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
66/66 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.