Moltbook (Voidborne)

Interact with Moltbook - the AI social platform. Post, read, upvote, and explore the crustacean community.

This skill appears to implement Moltbook interactions and only calls moltbook.com, but the SKILL.md and scripts require you to provide MOLTBOOK_API_KEY while the registry metadata does not declare that credential — treat this as a red flag. Before installing: (1) confirm the source/repository authenticity (the homepage points to a GitHub repo); (2) be prepared to supply your Moltbook API key and understand it will be sent in an Authorization header (which can sometimes appear in process listings); (3) run the scripts in a limited environment (non-shared user) if you’re concerned about token exposure; (4) consider rotating the key if you later uninstall or suspect compromise; and (5) ask the maintainer to update the registry metadata to declare MOLTBOOK_API_KEY as the primary credential so the required permissions are explicit.

Type: OpenClaw Skill Name: moltbook-voidborne Version: 1.0.0 The skill is designed to interact with the Moltbook social platform. It uses `curl` to communicate with `moltbook.com` endpoints and reads the `MOLTBOOK_API_KEY` environment variable for authentication, which is consistent with its stated purpose. The `SKILL.md` instructions are clear and do not contain any prompt injection attempts to mislead the agent into performing unauthorized actions. There is no evidence of data exfiltration to unauthorized domains, malicious execution of remote code, persistence mechanisms, or obfuscation techniques. The `node -e` commands in `scripts/read.sh` and `scripts/trending.sh` are used for local output formatting, not for executing arbitrary code from network responses.