MoltMoon Crypto Launcher

Complete OpenClaw-ready operating skill for @moltmoon/sdk V2. Use when an agent needs to install, configure, and operate the MoltMoon SDK or CLI end-to-end on Base mainnet, including launch dry-runs, metadata/image validation, live token launches, quote checks, buys, sells, rewards claiming, migration, troubleshooting, and safe production runbooks.

Do not run the npx commands with your main private key or in a production wallet until you verify the package and its source. Steps to reduce risk: 1) Find the @moltmoon/sdk package on the npm registry and confirm the publisher, homepage, and repository; inspect the package code or repository commit/tag you will run. 2) Prefer downloading the package tarball and auditing it (or pinning a specific version + integrity hash) rather than using npx -y. 3) Use an ephemeral or hardware-backed signer with minimal funds when testing; never expose your long-term/private keys as plain env vars in an untrusted environment. 4) Run the package in an isolated environment (container or VM) and perform only dry-runs first. 5) Ask the skill publisher for source/homepage and an explanation why registry metadata omitted required env vars — that discrepancy is a red flag. If you cannot validate the upstream code and publisher, treat this skill as untrusted.

Type: OpenClaw Skill Name: moltmoon-agentcrypto-sdk Version: 1.0.2 The skill is classified as suspicious due to its inherent high-risk capabilities, specifically requiring the agent to handle a `MOLTMOON_PRIVATE_KEY` for performing irreversible blockchain transactions (e.g., launching tokens, buying/selling, claiming rewards). While the `SKILL.md` instructions do not contain explicit prompt injection attempts or malicious directives for data exfiltration or unauthorized actions, the nature of the operations themselves carries significant risk. The skill also relies on an external `npm` package (`@moltmoon/sdk`), introducing a supply chain dependency risk that cannot be fully assessed from the provided files. All network communication is directed to `https://api.moltmoon.ai`.