openclaw 网盘下载
OpenClaw

技能详情(站内镜像,无评论)

首页 > 技能库 > Molt-Solver

Automatically solves Moltbook math captchas by parsing English text, extracting operations, calculating results, and formatting answers with two decimals.

开发与 DevOps

许可证:MIT-0

MIT-0 ·免费使用、修改和重新分发。无需归因。

版本:v1.0.0

统计:⭐ 0 · 817 · 4 current installs · 5 all-time installs

0

安装量(当前) 5

🛡 VirusTotal :可疑 · OpenClaw :可疑

Package:0xraini/molt-solver

安全扫描(ClawHub)

  • VirusTotal :可疑
  • OpenClaw :可疑

OpenClaw 评估

The skill's code mostly matches its stated purpose (solving Moltbook math challenges and submitting answers), but it accesses a user credential file and a network API without declaring those requirements and the SKILL.md and code disagree about where account context is loaded—this inconsistency is concerning.

目的

The name and files indicate a solver for Moltbook verification challenges, which aligns with the implementation: solveChallenge parses English-number words and verify() posts an answer to Moltbook's API. That capability is plausible for the stated purpose.

说明范围

SKILL.md claims the skill depends on memory/moltbook-state.json for account context and documents a /molt verify command, but the TypeScript code reads ~/.config/moltbook/credentials.json (CRED_PATH) and performs a network POST to https://www.moltbook.com/api/v1/verify. The SKILL.md does not disclose reading a credentials file or making network calls; those are runtime actions that should be declared and justified.

安装机制

No install spec — the package is instruction/code-only. That is low-risk in the sense that nothing external is downloaded at install time. The included code will run when invoked by the agent.

证书

The skill does not declare any required environment variables or config paths, yet the code reads the user's home config file (~/.config/moltbook/credentials.json) and expects an api_key inside. SKILL.md instead references memory/moltbook-state.json — this mismatch means the skill will access sensitive local credentials without declaring or justifying that access.

持久

always is false and the skill is user-invocable; autonomous invocation is allowed (platform default). While not privileged by manifest flags, the ability to read local credentials and call an external API increases its effective privilege and blast radius if invoked autonomously.

安装(复制给龙虾 AI)

将下方整段复制到龙虾中文库对话中,由龙虾按 SKILL.md 完成安装。

请把本段交给龙虾中文库(龙虾 AI)执行:为本机安装 OpenClaw 技能「Molt-Solver」。简介:Automatically solves Moltbook math captchas by parsing English text, extracting…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装:https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/0xraini/molt-solver/SKILL.md
(来源:yingzhi8.cn 技能库)

SKILL.md

打开原始 SKILL.md(GitHub raw)

暂无本地缓存内容,可在后台执行详情同步。