← 返回 Skills 市场
2124
总下载
3
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install moltcheck
功能描述
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.
安全使用建议
This skill is a network client that sends the GitHub repository URL (and optionally your API key) to moltcheck.com for analysis. Before installing or adding an API key: verify the MoltCheck service (website, OpenAPI, and GitHub repo) is reputable; be cautious about paying via SOL — confirm the wallet/memo on the official site; only provide the API key if you trust the provider; note the SKILL.md and README use different configuration methods (skill config JSON vs. MOLTCHECK_API_KEY), and skill.json version differs from the registry version — consider checking the published source repository to confirm authenticity before use.
功能分析
Type: OpenClaw Skill
Name: moltcheck
Version: 1.0.4
The MoltCheck skill is a security scanner that analyzes GitHub repositories for vulnerabilities by interacting with the `moltcheck.com` API. All network requests are directed to `https://moltcheck.com/api/v1`, which is consistent across `SKILL.md`, `README.md`, and `index.js`. The skill retrieves its API key from `process.env.MOLTCHECK_API_KEY`, which is a standard and expected behavior for configuration. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, obfuscation, or prompt injection attempts against the agent in any of the provided files.
能力评估
Purpose & Capability
Name/description match the code and SKILL.md: the implementation is a thin client that POSTs a GitHub URL to https://moltcheck.com/api/v1 for scanning, checks credits, and provides setup/payment instructions. Network access and an API key are expected for this purpose.
Instruction Scope
Runtime instructions and implemented commands (scan, credits, setup) are scoped to interacting with the MoltCheck API. The skill does not read arbitrary local files, shell history, or other environment variables; it only reads an optional MOLTCHECK_API_KEY and sends the provided repo URL to the remote API.
Install Mechanism
No install spec / no remote downloads are declared. The package contains a simple index.js module and a CLI entrypoint — nothing writes arbitrary code to disk or fetches executables from untrusted URLs.
Credentials
The code uses an optional environment variable (MOLTCHECK_API_KEY) though the skill metadata did not list required env vars — this is a minor inconsistency but not a security issue by itself. The skill asks users to provide payment via SOL in setup, which is outside the scanning function but explained in the README/SKILL.md.
Persistence & Privilege
The skill is not always-enabled and does not request system-wide configuration changes or cross-skill credentials. It requires no elevated or persistent privileges beyond normal network access.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install moltcheck - 安装完成后，直接呼叫该 Skill 的名称或使用
/moltcheck触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
- Added name and description fields to SKILL.md for improved metadata compatibility.
- No functional changes to commands or features.
v1.0.3
- Added a concise summary block to the top of SKILL.md for clearer description of the skill.
- No other functional or command changes. Documentation only.
v1.0.2
- Added skill.json file to define or update skill metadata.
- No other changes to functionality or documentation.
v1.0.1
- Improved skill description with more detail on security scanning features and use cases.
- Added clear explanations of core capabilities (automated code scanning, trust scoring, permission auditing, and risk communication).
- Updated pricing section to reflect new bulk discount rates.
- Clarified that the skill is essential for agents to avoid supply chain attacks.
- Reformatted and enhanced documentation for ease of understanding.
v1.0.0
- Initial release of MoltCheck Skill.
- Scan GitHub repositories for security risks using the MoltCheck API.
- Commands include: scan, credits, setup.
- Supports free tier (3 scans/day) and paid scans.
- Provides trust score, grade, risk summary, and permission analysis for scanned repos.
元数据
常见问题
Moltcheck Skill 是什么？
Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2124 次。
如何安装 Moltcheck Skill？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install moltcheck」即可一键安装，无需额外配置。
Moltcheck Skill 是免费的吗？
是的，Moltcheck Skill 完全免费（开源免费），可自由下载、安装和使用。
Moltcheck Skill 支持哪些平台？
Moltcheck Skill 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Moltcheck Skill？
由 moltcheck（@moltcheck）开发并维护，当前版本 v1.0.4。
推荐 Skills