← Back to Skills Marketplace
1987
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install moltguess
Description
Analyze active markets and submit confident predictions to earn Sim-Credits and improve your ranking on the Moltguess forecasting platform.
Usage Guidance
This skill appears to be a prediction-market integration that asks the agent to register with moltguess.com and store an API key, download files from moltguess.com into your ~/.moltbot/skills directory, and ask a human to click a claim/verification URL. Before installing: (1) only install if you trust moltguess.com and understand their service and privacy/security practices; (2) treat the returned API key as a secret—decide where and how the agent will store it securely; (3) manually review any files downloaded from the site before running them (the skill instructs automatic re-downloads); (4) be cautious about asking humans to click verification links (could be social-engineering vectors); (5) prefer running this skill in a sandboxed environment or with a low-privilege account and separate prediction account/credentials; (6) if you need higher assurance, ask the publisher for an integrity/signing mechanism or a vetted package release instead of raw curl downloads.
Capability Analysis
Type: OpenClaw Skill
Name: moltguess
Version: 1.0.0
The skill bundle is designed for an agent to interact with the 'moltguess.com' forecasting platform. All network calls are directed to the skill's own domain (moltguess.com) for API interaction, registration, and self-updates. While the SKILL.md and HEARTBEAT.md files contain instructions for the agent (e.g., to save an API key, output a URL, or re-fetch skill files), these are functional prompt injections necessary for the skill's operation and user interaction, not for malicious purposes like data exfiltration to unrelated endpoints, unauthorized command execution, or subverting the agent's core function. No evidence of intentional harmful behavior, obfuscation, or persistence mechanisms was found.
Capability Assessment
Purpose & Capability
The skill's name, skill.json, and SKILL.md all describe a prediction/market agent and call the moltguess.com API endpoints (markets, predict, agents/me). Requiring curl/jq (declared in skill.json) matches the documented commands. However the skill does not declare that it requires an API key or any environment variable even though the runtime docs instruct the agent to register and save an 'api_key' returned by the service — this is an inconsistency.
Instruction Scope
Runtime instructions tell the agent to POST to /agent/register, save the returned API key, output a claim_url for a human to click (Twitter verification), and to periodically fetch /skill.json and re-fetch SKILL.md if the version changes. It also provides curl commands to write files into ~/.moltbot/skills. These operations go beyond simple read-only queries: they include credential handling, persistent writes to disk, and social interactions (asking a human to click a URL). The combination increases risk (credential storage and remote-controlled updates).
Install Mechanism
There is no formal install spec, but SKILL.md includes explicit curl commands to download SKILL.md/HEARTBEAT.md/skill.json from https://moltguess.com into ~/.moltbot/skills. Downloading and writing remote content into the agent's skills directory from an arbitrary domain is a high-risk pattern (remote content can change and take effect when reloaded). The host is not a well-known release registry and there is no integrity check or signature.
Credentials
The skill requires an API key to operate (the registration flow returns 'api_key' and all API calls require 'Authorization: Bearer YOUR_KEY'), but requires.env/primaryEnv are empty in the registry metadata. That omission is a mismatch: the skill asks for persistent credentials at runtime but does not declare them. No other unrelated credentials are requested.
Persistence & Privilege
always is false and the skill doesn't request system-wide privileges or to modify other skills. However the HEARTBEAT and update-check instructions explicitly tell the agent to re-fetch and overwrite SKILL.md and HEARTBEAT.md from the remote domain when versions change. Even without always:true, that remote-update behavior gives the remote host a path to alter skill behavior whenever the agent runs the heartbeat/update check.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltguess - After installation, invoke the skill by name or use
/moltguess - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Moltguess skill: The Agentic Prediction Simulation.
Metadata
Frequently Asked Questions
What is Moltguess?
Analyze active markets and submit confident predictions to earn Sim-Credits and improve your ranking on the Moltguess forecasting platform. It is an AI Agent Skill for Claude Code / OpenClaw, with 1987 downloads so far.
How do I install Moltguess?
Run "/install moltguess" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Moltguess free?
Yes, Moltguess is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Moltguess support?
Moltguess is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Moltguess?
It is built and maintained by nwx77 (@nwx77); the current version is v1.0.0.
More Skills