Moltbook Fanboy

Automatically browse Moltbook to get trending posts, generate comments and likes, and create daily summary reports. Use when user asks about Moltbook trends,...

This skill is partially coherent but contains several mismatches you should understand before installing: 1) It claims to post likes/comments on Moltbook and send reports to Telegram, but the code only simulates interactions locally and does not implement Telegram posting — if you expect real posting, the skill is incomplete and could mislead you. 2) The generator script will write to /root/clawd/obsidian-vault and attempt git add/commit/push — that will use whatever git credentials are configured on the host (SSH keys or stored credentials) even though no credentials are declared. If your obsidian vault or git repo contains private data, running this skill could push it to the remote. 3) There are undeclared runtime assumptions (python 'requests' package, git installed & configured). Consider the following before using: run the scripts in a sandboxed environment, inspect and/or remove the git push block (in generate_daily_report.py) or require an explicit GITHUB credential/config, add explicit TELEGRAM_TOKEN/TELEGRAM_CHAT env vars if you want Telegram posting and implement secure handling, and change the output path to a skill-local directory if you don’t want it modifying your Obsidian vault. If you are unsure, do not enable autonomous/cron execution or grant the skill write access to your real vault/repo until you harden these behaviors.

Type: OpenClaw Skill Name: moltbook-fanboy Version: 1.0.4 The skill is classified as suspicious due to the use of `subprocess.run` in `scripts/generate_daily_report.py` to execute `git add`, `git commit`, and `git push` commands. While these actions are explicitly stated in `SKILL.md` as part of the 'Obsidian Sync via GitHub' functionality and are intended to push generated reports to a configured remote, the direct execution of system commands for network operations (pushing to GitHub) represents a significant capability that, if misused or exploited, could lead to unauthorized data manipulation or exfiltration. However, there is no clear evidence of intentional malicious behavior within the provided code or instructions, such as credential theft, backdoor installation, or prompt injection designed to subvert the agent's core purpose beyond its stated function.