← Back to Skills Marketplace
2124
Downloads
3
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install moltcheck
Description
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.
Usage Guidance
This skill is a network client that sends the GitHub repository URL (and optionally your API key) to moltcheck.com for analysis. Before installing or adding an API key: verify the MoltCheck service (website, OpenAPI, and GitHub repo) is reputable; be cautious about paying via SOL — confirm the wallet/memo on the official site; only provide the API key if you trust the provider; note the SKILL.md and README use different configuration methods (skill config JSON vs. MOLTCHECK_API_KEY), and skill.json version differs from the registry version — consider checking the published source repository to confirm authenticity before use.
Capability Analysis
Type: OpenClaw Skill
Name: moltcheck
Version: 1.0.4
The MoltCheck skill is a security scanner that analyzes GitHub repositories for vulnerabilities by interacting with the `moltcheck.com` API. All network requests are directed to `https://moltcheck.com/api/v1`, which is consistent across `SKILL.md`, `README.md`, and `index.js`. The skill retrieves its API key from `process.env.MOLTCHECK_API_KEY`, which is a standard and expected behavior for configuration. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in any of the provided files.
Capability Assessment
Purpose & Capability
Name/description match the code and SKILL.md: the implementation is a thin client that POSTs a GitHub URL to https://moltcheck.com/api/v1 for scanning, checks credits, and provides setup/payment instructions. Network access and an API key are expected for this purpose.
Instruction Scope
Runtime instructions and implemented commands (scan, credits, setup) are scoped to interacting with the MoltCheck API. The skill does not read arbitrary local files, shell history, or other environment variables; it only reads an optional MOLTCHECK_API_KEY and sends the provided repo URL to the remote API.
Install Mechanism
No install spec / no remote downloads are declared. The package contains a simple index.js module and a CLI entrypoint — nothing writes arbitrary code to disk or fetches executables from untrusted URLs.
Credentials
The code uses an optional environment variable (MOLTCHECK_API_KEY) though the skill metadata did not list required env vars — this is a minor inconsistency but not a security issue by itself. The skill asks users to provide payment via SOL in setup, which is outside the scanning function but explained in the README/SKILL.md.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide configuration changes or cross-skill credentials. It requires no elevated or persistent privileges beyond normal network access.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install moltcheck - After installation, invoke the skill by name or use
/moltcheck - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Added name and description fields to SKILL.md for improved metadata compatibility.
- No functional changes to commands or features.
v1.0.3
- Added a concise summary block to the top of SKILL.md for clearer description of the skill.
- No other functional or command changes. Documentation only.
v1.0.2
- Added skill.json file to define or update skill metadata.
- No other changes to functionality or documentation.
v1.0.1
- Improved skill description with more detail on security scanning features and use cases.
- Added clear explanations of core capabilities (automated code scanning, trust scoring, permission auditing, and risk communication).
- Updated pricing section to reflect new bulk discount rates.
- Clarified that the skill is essential for agents to avoid supply chain attacks.
- Reformatted and enhanced documentation for ease of understanding.
v1.0.0
- Initial release of MoltCheck Skill.
- Scan GitHub repositories for security risks using the MoltCheck API.
- Commands include: scan, credits, setup.
- Supports free tier (3 scans/day) and paid scans.
- Provides trust score, grade, risk summary, and permission analysis for scanned repos.
Metadata
Frequently Asked Questions
What is Moltcheck Skill?
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation. It is an AI Agent Skill for Claude Code / OpenClaw, with 2124 downloads so far.
How do I install Moltcheck Skill?
Run "/install moltcheck" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Moltcheck Skill free?
Yes, Moltcheck Skill is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Moltcheck Skill support?
Moltcheck Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Moltcheck Skill?
It is built and maintained by moltcheck (@moltcheck); the current version is v1.0.4.
More Skills