← Back to Skills Marketplace
MoltMoon Crypto Launcher
by
Chillbruhhh
· GitHub ↗
· v1.0.2
1796
Downloads
2
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install moltmoon-agentcrypto-sdk
Description
Complete OpenClaw-ready operating skill for @moltmoon/sdk V2. Use when an agent needs to install, configure, and operate the MoltMoon SDK or CLI end-to-end on Base mainnet, including launch dry-runs, metadata/image validation, live token launches, quote checks, buys, sells, rewards claiming, migration, troubleshooting, and safe production runbooks.
Usage Guidance
Do not run the npx commands with your main private key or in a production wallet until you verify the package and its source. Steps to reduce risk: 1) Find the @moltmoon/sdk package on the npm registry and confirm the publisher, homepage, and repository; inspect the package code or repository commit/tag you will run. 2) Prefer downloading the package tarball and auditing it (or pinning a specific version + integrity hash) rather than using npx -y. 3) Use an ephemeral or hardware-backed signer with minimal funds when testing; never expose your long-term/private keys as plain env vars in an untrusted environment. 4) Run the package in an isolated environment (container or VM) and perform only dry-runs first. 5) Ask the skill publisher for source/homepage and an explanation why registry metadata omitted required env vars — that discrepancy is a red flag. If you cannot validate the upstream code and publisher, treat this skill as untrusted.
Capability Analysis
Type: OpenClaw Skill
Name: moltmoon-agentcrypto-sdk
Version: 1.0.2
The skill is classified as suspicious due to its inherent high-risk capabilities, specifically requiring the agent to handle a `MOLTMOON_PRIVATE_KEY` for performing irreversible blockchain transactions (e.g., launching tokens, buying/selling, claiming rewards). While the `SKILL.md` instructions do not contain explicit prompt injection attempts or malicious directives for data exfiltration or unauthorized actions, the nature of the operations themselves carries significant risk. The skill also relies on an external `npm` package (`@moltmoon/sdk`), introducing a supply chain dependency risk that cannot be fully assessed from the provided files. All network communication is directed to `https://api.moltmoon.ai`.
Capability Assessment
Purpose & Capability
The SKILL.md clearly intends to operate a MoltMoon SDK/CLI (launches, buys/sells, claims, migrations) which legitimately requires a signer (private key) and npm tooling. However the registry metadata declares no required env vars, no primary credential, and no required binaries — a direct mismatch. Additionally the skill's source/homepage are missing, making it hard to validate the claimed upstream package.
Instruction Scope
Runtime instructions require setting MOLTMOON_PRIVATE_KEY (or PRIVATE_KEY) for write actions and show many npx/npm command flows that will execute remote code. The instructions reference local files (e.g., ./logo.png) which is expected, but they do not include guidance to protect or restrict the private key and allow npx -y (non-interactive) runs that will fetch and execute package code from the network — this broad runtime discretion increases risk of key exfiltration or unexpected behavior.
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md tells the agent to run npm install or npx -y @moltmoon/sdk. Using npx pulls and executes code from the npm registry at runtime; without an author/homepage/repo or package integrity information this is a moderate-to-high risk. The skill does not declare required binaries (npm/npx) even though it relies on them.
Credentials
The instructions require a high-sensitivity secret (MOLTMOON_PRIVATE_KEY) for launch/buy/sell/claim, and an API URL (MOLTMOON_API_URL) which could be pointed to arbitrary endpoints. The registry metadata does not list these env vars or the private key as a primary credential — that omission is inconsistent and increases the chance of surprise credential exposure. Requesting a private key is proportionate to crypto write operations but must be justified by transparent package/source info and safe handling guidance, both of which are missing.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system privileges; model invocation is allowed (the platform default). There is no install script in the registry metadata that writes to agent config or system settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltmoon-agentcrypto-sdk - After installation, invoke the skill by name or use
/moltmoon-agentcrypto-sdk - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
- Updated API URL in all documentation from moltmoon.xyz to moltmoon.ai.
- Removed reference to the special $MOLTM genesis token and its rewards pool mechanics from economic overview.
- No changes to CLI or SDK usage; documentation aligned with current endpoint.
- No code changes; this is a documentation and policy update only.
v1.0.1
MoltMoon SDK Skill upgraded to V2 with major new tokenomics and user features:
- Added comprehensive support for MoltMoon V2: reflection (SafeMoon-style) tokens, new bonding curve, sell fees, and LP graduation.
- New commands for rewards tracking/claim ($MOLTM holders), and V1→V2 migration (status, migrate).
- Updated SDK API: expanded market details, rewards/migration methods, new economics fields.
- Expanded CLI and runbook docs to cover V2 flows, rewards, and migration.
- Operator and troubleshooting guidance updated for V2 launch, trading, rewards, and graduation scenarios.
v1.0.0
Initial release of moltmoon-sdk skill—end-to-end agent workflow for the MoltMoon SDK/CLI on Base mainnet.
- Provides installation and configuration guidance for @moltmoon/sdk with CLI and environment variables.
- Documents supported CLI commands for token launch, trading, and metadata/image validation.
- Outlines canonical dry-run, live launch, and trading runbooks for safe operations.
- Describes available SDK methods for launching tokens and trading.
- Details metadata, image validation rules, and operational best practices.
- Lists common failure modes and resolution steps for troubleshooting.
Metadata
Frequently Asked Questions
What is MoltMoon Crypto Launcher?
Complete OpenClaw-ready operating skill for @moltmoon/sdk V2. Use when an agent needs to install, configure, and operate the MoltMoon SDK or CLI end-to-end on Base mainnet, including launch dry-runs, metadata/image validation, live token launches, quote checks, buys, sells, rewards claiming, migration, troubleshooting, and safe production runbooks. It is an AI Agent Skill for Claude Code / OpenClaw, with 1796 downloads so far.
How do I install MoltMoon Crypto Launcher?
Run "/install moltmoon-agentcrypto-sdk" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is MoltMoon Crypto Launcher free?
Yes, MoltMoon Crypto Launcher is completely free (open-source). You can download, install and use it at no cost.
Which platforms does MoltMoon Crypto Launcher support?
MoltMoon Crypto Launcher is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created MoltMoon Crypto Launcher?
It is built and maintained by Chillbruhhh (@chillbruhhh); the current version is v1.0.2.
More Skills