← 返回 Skills 市场
2118
总下载
1
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install moltpho
功能描述
Shop autonomously on Amazon via Moltpho - search products, manage credit, and purchase items using mUSD on Base mainnet
安全使用建议
Key things to consider before installing: (1) This skill can autonomously detect 'need' signals in conversations and place real orders—if you enable it, set confirmation_required in the portal or disable proactive/autonomous purchasing to avoid unexpected charges. (2) It will create and store API credentials and secrets on disk (~/.config/moltpho/credentials.json or %APPDATA%); treat those like sensitive keys and verify the service (api.moltpho.com / portal.moltpho.com) is legitimate before saving secrets. (3) The package includes Python code and requirements.txt but no install instructions — confirm how dependencies (requests) will be provided or run it in a sandbox/isolated environment. (4) There's a minor mismatch: the SKILL.md references MOLTPHO_CREDENTIALS_PATH but the skill metadata lists no env vars — expect possible configuration surprises. (5) The skill source/owner is unknown; verify the publisher and, if possible, audit the code (especially bootstrap, credential storage, and the proactive purchase logic) and restrict per-order/daily caps in the portal before enabling autonomous behavior.
功能分析
Type: OpenClaw Skill
Name: moltpho
Version: 0.1.5
The OpenClaw AgentSkills skill bundle for Moltpho is classified as benign. The skill's purpose is autonomous shopping on Amazon via the Moltpho platform, which involves credential management, product search, and purchasing. All network communication is directed to a single, hardcoded domain (api.moltpho.com). Sensitive credentials are saved locally with appropriate `chmod 600` permissions. The `SKILL.md` and `lib/proactive.py` detail a robust proactive purchasing logic with multiple safeguards, including price caps, system blocklists, and confidence thresholds, which aligns with the stated purpose and does not indicate malicious prompt injection against the analyzing agent. No evidence of data exfiltration, malicious execution, persistence, or obfuscation was found across the files.
能力评估
Purpose & Capability
The stated purpose (autonomous shopping on Amazon using mUSD) matches the code and API endpoints (catalog search, quotes, x402 signing, orders). Storing agent credentials and performing on-chain payment signing is consistent with that purpose. Minor inconsistency: SKILL.md references an optional environment override (MOLTPHO_CREDENTIALS_PATH) but the skill metadata lists no required env vars.
Instruction Scope
Runtime instructions ask the agent to register, read/write a credentials file in the user's home/appdata, auto-open a browser, and run a proactive_monitoring loop that passively watches conversations for 'need' signals and may autonomously create quotes and place orders. Passive monitoring + automatic purchase flows are scope-expansive and can lead to unexpected charges if owner confirmation or portal settings are not strictly enforced. SKILL.md also relies on reading/writing local credential files and optionally pulling an 'openclaw_instance_id' without documenting its source.
Install Mechanism
This is listed as an instruction-only skill but includes Python code and a requirements.txt (requests>=2.28.0) with no install spec. That mismatch means the runtime environment may lack declared dependencies or installation steps, causing failures or unexpected behavior. Because there is no install hook, it's unclear how/when dependencies will be installed.
Credentials
The skill does not declare required environment variables yet the SKILL.md documents an override variable (MOLTPHO_CREDENTIALS_PATH). The skill stores API key secrets and wallet addresses to disk (~/.config/moltpho/credentials.json or %APPDATA% path) and will save an api_key_secret shown once by the service — storing such secrets locally is expected for this purpose but is sensitive and should be highlighted to owners. No other unrelated credentials are requested, which is appropriate.
Persistence & Privilege
always:false (good), but the skill is allowed to be invoked autonomously (platform default) and explicitly implements proactive/autonomous purchasing. That combination increases blast radius (ability to create real orders and spend credit) even without 'always: true'. There is no evidence it tries to modify other skills or global settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install moltpho - 安装完成后，直接呼叫该 Skill 的名称或使用
/moltpho触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.5
More API fixes
v0.1.4
Better error handling in moltpho.py
v0.1.3
Comprehensive API updates
v0.1.2
No user-facing changes in this release; no file changes detected.
v0.1.1
- Initial release of the Moltpho skill.
- Shop autonomously on Amazon using mUSD credit on Base mainnet.
- Features agent registration, product search, and purchasing via x402 protocol.
- Includes proactive purchase monitoring, credit balance checks, and support ticket creation.
- Credential management and shipping profile collection supported.
- Added .DS_Store file.
v0.1.0
Initial public release of moltpho autonomous Amazon shopping skill.
- Enables agents to register and manage credentials for shopping.
- Supports product search, credit monitoring, and purchasing via mUSD on Base mainnet.
- Integrates with Amazon through the Moltpho backend, including x402 payment protocol.
- Handles shipping profile management, both interactively and via portal.
- Implements proactive purchase detection from conversation with configurable logic.
- Provides support functions, such as budget checks and support ticket creation.
元数据
常见问题
Moltpho 是什么？
Shop autonomously on Amazon via Moltpho - search products, manage credit, and purchase items using mUSD on Base mainnet. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2118 次。
如何安装 Moltpho？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install moltpho」即可一键安装，无需额外配置。
Moltpho 是免费的吗？
是的，Moltpho 完全免费（开源免费），可自由下载、安装和使用。
Moltpho 支持哪些平台？
Moltpho 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Moltpho？
由 unifiedh（@unifiedh）开发并维护，当前版本 v0.1.5。
推荐 Skills