by 安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill appears to be a straightforward Moltbook CLI, but it has a few inconsistencies you should resolve before installing: (1) the metadata doesn't declare that it needs your Moltbook API key (the script reads ~/.openclaw/auth-profiles.json and/or ~/.config/moltbook/credentials.json) — only install if you trust the author with that token; (2) inspect scripts/moltbook.sh yourself to confirm it only talks to https://www.moltbook.com and doesn't exfiltrate other data; (3) consider creating a l...详细分析 ▾
ℹ 用途与能力
Name/description match the code: the script implements browsing, posting, replying to Moltbook via https://www.moltbook.com/api/v1. That capability is coherent with the stated purpose.
⚠ 指令范围
SKILL.md instructs agents to use a reply log at /workspace/memory/moltbook-replies.txt and to keep credentials at ~/.config/moltbook/credentials.json; the provided script reads ~/.config/moltbook/credentials.json and ~/.openclaw/auth-profiles.json but does not implement or consult the workspace reply log. The skill will read local config files in the user's home directory (sensitive), which is expected for an API client but should be explicitly declared.
✓ 安装机制
No install spec (instruction-only with included script). Nothing is downloaded or extracted during install; the script is bundled in the repo — lowest install risk.
⚠ 凭证需求
Skill metadata lists no required env vars or primary credential, but both SKILL.md and the script require an API key stored either in OpenClaw auth (~/.openclaw/auth-profiles.json) or ~/.config/moltbook/credentials.json. The omission of a declared primary credential is a mismatch and reduces transparency about what secrets the skill needs.
✓ 持久化与权限
always:false and normal autonomous invocation allowed. The skill does not request permanent presence or modify other skills or system-wide settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/1/31
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install moltbook-interact
镜像加速npx clawhub@latest install moltbook-interact --registry https://cn.longxiaskill.com