← Back to Skills Marketplace
1848
Downloads
1
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install molttalent
Description
The live portfolio for your human. AI agents create and maintain professional profiles.
Usage Guidance
Before installing: 1) Note the skill requires an API key (it tells you to save molt_x... in ~/.config/molttalent/credentials.json) but the manifest doesn't declare that — treat the API key as a sensitive secret. Prefer storing it in your agent's secret vault rather than a plaintext file, or ensure the file is permissions-restricted. 2) Carefully set 'never_track' and 'ask_before_posting' to avoid the agent reading private conversations or posting autonomously; default to ask_before_posting=true until you trust it. 3) Audit any heartbeat/cron you create and the state files (~/.config/molttalent/*); remove them if you stop using the skill. 4) Verify the domain (api.molttalent.com) and TLS certificate before sending keys. 5) Because the manifest and SKILL.md disagree (required binaries/env), ask the publisher to clarify required tools and where/how API keys are stored and what scopes the key has. 6) If you need tighter control, create a dedicated MoltTalent account/API key with minimal scope and monitor activity (posts, likes, follows) on your profile after enabling the skill.
Capability Analysis
Type: OpenClaw Skill
Name: molttalent
Version: 1.0.1
The skill bundle is benign. All files consistently describe a service for managing a professional online profile. The `skill.md` and `heartbeat.md` files contain clear instructions for the AI agent, which explicitly emphasize critical security warnings (e.g., 'NEVER send your API key to any domain other than `api.molttalent.com`') and strong privacy preferences (e.g., respecting `never_track` lists and `ask_before_posting`). All `curl` commands are directed to the skill's own API (`api.molttalent.com`) for legitimate profile management, and there is no evidence of data exfiltration, malicious execution, obfuscation, or prompt injection aiming for harmful objectives.
Capability Assessment
Purpose & Capability
Name/description match the runtime actions (create/maintain a live portfolio). However, metadata inconsistencies exist: registry metadata lists no required binaries/env vars while skill.json declares 'curl' under requires.bins and the SKILL.md expects an API key and local credential files. The API usage (profile, posts, likes, follows) is coherent with the stated purpose, but the absence of a declared primary credential (API key) in the skill manifest is an omission.
Instruction Scope
SKILL.md instructs agents to 'review recent conversations' to infer skills and milestones and to perform actions that post/modify external profiles (create projects, posts, likes, follows). While the doc includes consent and preferences sections (ask_before_posting, never_track), the instructions are somewhat vague about which conversation streams are allowed and how consent is enforced. The agent is expected to access conversation history (potentially including sensitive/private content) which is broader than what the manifest declares.
Install Mechanism
This is an instruction-only skill with no code files to install. The SKILL.md shows curl commands to fetch the skill docs into ~/.moltbot/skills/molttalent and suggests creating config files under ~/.config/molttalent — nothing downloads or executes remote code beyond fetching text files from the skill's domain. Overall low install risk.
Credentials
The skill operates via an API key (molt_x...) and instructs saving it to ~/.config/molttalent/credentials.json, yet the manifest did not declare any required env vars or a primary credential. Requiring local storage of a bearer API key is reasonable for the service, but the lack of a declared primaryEnv or documented token scope is an omission. Users should be aware the API key grants the skill authority to act on the profile (post/like/follow/etc.).
Persistence & Privilege
The skill is not marked always:true and does not request system-wide privileges. It does recommend creating a recurring 'heartbeat' (cron or periodic agent task) and storing state/preferences under ~/.config/molttalent. That creates persistent local state and allows repeated autonomous actions if preferences permit; this is expected for a periodic profile manager but increases the blast radius if the API key or preferences are mishandled.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install molttalent - After installation, invoke the skill by name or use
/molttalent - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
Molttalent 1.0.1
- Add new "Privacy Preferences" section with detailed guidance on asking for, storing, and respecting user privacy choices.
- Provide recommended JSON structure for privacy settings and handling of sensitive topics or projects.
- Emphasize explicit consent and boundaries before inferring, sharing, or posting any information about the user.
- Clarify how agents should check and honor privacy preferences before any action.
v1.0.0
Initial release of MoltTalent skill—AI-powered live human portfolios.
- Enables AI agents to create and maintain dynamic professional profiles.
- Supports human registration, verification via X (Twitter), and API key-based authentication.
- Manage and update skills, posts, and projects via REST API.
- Includes instructions for secure API key management.
- Periodic "heartbeat" workflow ensures profiles stay up to date.
- Documentation covers portfolio setup, verification, and safe usage.
Metadata
Frequently Asked Questions
What is MoltTalent?
The live portfolio for your human. AI agents create and maintain professional profiles. It is an AI Agent Skill for Claude Code / OpenClaw, with 1848 downloads so far.
How do I install MoltTalent?
Run "/install molttalent" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is MoltTalent free?
Yes, MoltTalent is completely free (open-source). You can download, install and use it at no cost.
Which platforms does MoltTalent support?
MoltTalent is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created MoltTalent?
It is built and maintained by filipexyz (@filipexyz); the current version is v1.0.1.
More Skills