MoltCredit

Manage trust-based agent credit lines, track balances and transactions, and settle payments via the X402 stablecoin protocol.

This skill appears to do what it says (a lightweight client for a cloud-hosted MoltCredit API), but check these points before installing or using it: 1) The scripts require an API key (MOLTCREDIT_API_KEY) even though the registry metadata omitted that—only set this key if you trust the operator of https://moltcredit-737941094496.europe-west1.run.app. 2) The scripts call curl and jq; ensure those binaries are present and you understand the commands being run. 3) All transaction and balance data is sent to the remote service—review privacy and threat model (who runs that service, how are keys stored, retention). 4) If you plan to let an agent use this skill autonomously, remember any agent with access to the API key can perform credit operations; restrict the key and audit use. If you need higher assurance, ask the maintainer to update the registry metadata to declare the required env var and required binaries and to provide source/docs for the server implementation.

Type: OpenClaw Skill Name: moltcredit Version: 1.0.0 The skill bundle is classified as suspicious due to several shell and JSON injection vulnerabilities in its bash scripts. Specifically, `scripts/balance.sh` and `scripts/history.sh` directly interpolate user-supplied arguments into `curl` URLs, creating potential shell injection risks. `scripts/settle.sh` directly inserts a user-supplied agent name into a JSON payload without proper escaping, leading to a JSON injection vulnerability. While these flaws could be exploited for command execution or data manipulation, there is no evidence of intentional malicious behavior such as data exfiltration or backdoor installation. The `SKILL.md` content is benign and does not contain prompt injection attempts against the AI agent. All network calls are directed to the legitimate Google Cloud Run endpoint: https://moltcredit-737941094496.europe-west1.run.app.