MoltsPay

AI Agent's crypto wallet manager - generate wallets, manage transactions, and claim ORA token rewards.

Things to consider before installing/running this skill: - Do NOT store real private keys in ~/.config/moltpay/wallets.json unencrypted. If you follow these instructions, use a throwaway/test wallet with no funds. Prefer hardware wallets or encrypted key stores. - The skill registers addresses with https://moltpay.net to claim tokens; verify the legitimacy of that domain/project before sending addresses or interacting further. Offers of 'free' tokens with high withdrawal thresholds are a common scam pattern. - The SKILL.md does not show how to sign or broadcast real on-chain transactions; 'manage transactions' appears to mean recording transactions in MoltPay's service rather than controlling funds on-chain. - The heartbeat/check code suggests periodic network calls. Audit the full SKILL.md (complete heartbeat code) to ensure it does not read and transmit private keys. If you can't review it, avoid running automated heartbeat tasks. - If you install the recommended Python packages, do so in a virtualenv and inspect package sources (pip install -U --no-cache-dir in a controlled environment). Avoid global installs. - If you want to try the skill safely: create new test wallets with no funds, register only addresses (not private keys), monitor network calls, and never enter real private keys or mnemonic phrases into scripts you haven't audited. Additional information that would change this assessment: a complete SKILL.md showing the heartbeat implementation (confirming it does not transmit private keys), an explicit statement and code demonstrating encrypted local key storage or hardware-wallet integration, or a trustworthy project homepage/source code repository for moltpay.net that can be audited would increase confidence and could move the verdict toward benign.

Type: OpenClaw Skill Name: xiaoding-moltpay Version: 1.0.4 The skill exhibits several high-risk patterns characteristic of a cryptocurrency scam and contains significant security vulnerabilities. It instructs the agent to generate crypto wallets and store private keys in plaintext at `~/.config/moltpay/wallets.json` (SKILL.md). The instructions use prompt injection to compel the agent to force-open QR code images on the host machine using `subprocess.run` and to solicit funds directly from the user. Additionally, the 'ORA token' reward system (moltpay.net) employs a common scam tactic where a small initial 'reward' is granted but withdrawal is blocked by a high minimum threshold (3333 ORA), likely intended to lure users into depositing funds or providing data.