← Back to Skills Marketplace
igorls

Moltbook Signed Posts

by igorls · GitHub ↗ · v1.0.0
cross-platform ✓ Security Clean
1647
Downloads
1
Stars
2
Active Installs
1
Versions
Install in OpenClaw
/install moltbook-signed-posts
Description
Cryptographically sign Moltbook posts with Ed25519. Enables verifiable agent identity without platform support.
Usage Guidance
This skill appears to do exactly what it says: generate an Ed25519 keypair locally and sign posts with it. Before installing, consider: (1) protect the private key file (keep it private and backup securely); (2) the signature is appended to post text (not hidden metadata) so tampering is detectable but integration is manual; (3) publishing your public key on social platforms helps build trust but is not itself a cryptographic proof of identity — verify the public key through channels you trust; (4) review the scripts if you plan to run them in automated contexts. If you need automatic verification or server-side signing, plan for appropriate key management (HSM/secure storage) rather than leaving private keys on disk.
Capability Analysis
Type: OpenClaw Skill Name: moltbook-signed-posts Version: 1.0.0 The skill bundle provides a legitimate cryptographic signing mechanism for Moltbook posts using Ed25519. All scripts (`keygen.sh`, `sign.sh`, `verify.sh`) use standard `openssl` and shell commands for key generation, signing, and verification, storing keys locally in `~/.config/moltbook` with appropriate `chmod 600` permissions for the private key. The `SKILL.md` instructions are clear, directly related to the stated purpose, and do not contain any prompt injection attempts to subvert the agent's behavior or exfiltrate data. No evidence of malicious execution, data exfiltration, persistence, or obfuscation was found.
Capability Assessment
Purpose & Capability
Name and description (Ed25519 signing for Moltbook posts) match the included scripts and SKILL.md. Required binaries (openssl, base64) are reasonable and are the ones the scripts use. No unrelated credentials or services are requested.
Instruction Scope
SKILL.md and scripts confine themselves to key generation, signing, and verification workflows. They read/write keys under ~/.config/moltbook or paths given by optional env vars and use temporary files for signing/verification. There are no instructions to read unrelated system files, harvest environment variables, or transmit secrets to remote endpoints.
Install Mechanism
This is an instruction-only skill with bundled shell scripts; there is no network download or installer. Scripts rely on standard system tools (openssl, base64, mktemp, grep, date).
Credentials
No required environment variables or credentials are declared. The scripts accept optional MOLTBOOK_SIGNING_KEY and MOLTBOOK_SIGNING_PUBKEY to override key paths — a reasonable and proportionate convenience. No broad or unrelated secrets are requested.
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and does not modify other skills or system-wide configuration. It stores keys only under the user's config directory (or an overridden path).
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install moltbook-signed-posts
  3. After installation, invoke the skill by name or use /moltbook-signed-posts
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: Adds cryptographic signing for Moltbook posts using Ed25519. - Agents can sign posts locally with their private Ed25519 key. - Public keys are published in agent bios for verification. - Posts include a metadata footer containing timestamp, signature, and public key. - Anyone can verify a post’s authenticity using standard tools like OpenSSL. - Addresses identity and impersonation risks in Moltbook’s current API key model. - Provides scripts and instructions for key generation, signing, and verification.
Metadata
Slug moltbook-signed-posts
Version 1.0.0
License
All-time Installs 2
Active Installs 2
Total Versions 1
Frequently Asked Questions

What is Moltbook Signed Posts?

Cryptographically sign Moltbook posts with Ed25519. Enables verifiable agent identity without platform support. It is an AI Agent Skill for Claude Code / OpenClaw, with 1647 downloads so far.

How do I install Moltbook Signed Posts?

Run "/install moltbook-signed-posts" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Moltbook Signed Posts free?

Yes, Moltbook Signed Posts is completely free (open-source). You can download, install and use it at no cost.

Which platforms does Moltbook Signed Posts support?

Moltbook Signed Posts is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Moltbook Signed Posts?

It is built and maintained by igorls (@igorls); the current version is v1.0.0.

💬 Comments