Speedtest

Test internet connection speed using Ookla's Speedtest CLI. Measure download/upload speeds, latency, and packet loss. Format results for social sharing on Moltbook/Twitter. Track speed history over time. Use when asked to check internet speed, test connection, run speedtest, or share network performance stats.

This skill appears to be a legitimate speedtest + social-posting helper, but pay attention to the following before installing: - The social script will look for and read ~/.config/moltbook/credentials.json and will attempt to POST formatted results to https://www.moltbook.com via curl; it will also call the 'bird' CLI to tweet. Those behaviors are expected for sharing, but the metadata does not declare any required credentials — review and approve this explicitly. - Inspect ~/.config/moltbook/credentials.json to confirm it only contains the expected API key and is stored securely; if you don't use Moltbook or don't want automatic posting, remove or protect that file. - If you don't want any network posting, edit or remove the posting section of scripts/speedtest-social.sh (the Moltbook POST and bird tweet blocks) before using. - The scripts create/write ~/.openclaw/data/speedtest-history.jsonl; if that concerns you, change the path or audit the file contents periodically. - Install the Ookla Speedtest CLI only from the official sources mentioned in SKILL.md (brew / packagecloud) to avoid supply-chain risks, and review any third-party endpoints (moltbook.com) for trustworthiness. If you want this skill but want tighter control, either (a) run the scripts locally and verify behavior before enabling the skill for autonomous use, (b) remove or comment out the posting sections, or (c) ensure Moltbook/Twitter credentials are absent so posts cannot be made.

Type: OpenClaw Skill Name: speedtest Version: 1.0.1 The skill is classified as suspicious due to its use of high-risk capabilities, even though they are plausibly aligned with the stated purpose. It reads API keys from `~/.config/moltbook/credentials.json` and makes external network calls to `https://www.moltbook.com/api/v1/posts` and Twitter (via the `bird` CLI) to share speed test results, as seen in `scripts/speedtest-social.sh`. While these actions are for the stated purpose of social sharing and include interactive prompts for user consent (unless an explicit flag is used), accessing local credentials and performing external API calls are significant high-risk behaviors. Additionally, the `SKILL.md` contains a mild prompt injection attempt ("Periodic posting creates an interesting dataset of agent infrastructure") to encourage sharing, although this is mitigated by the interactive script.