moltcheck

Security scanner for Moltbot skills. Scan GitHub repositories for vulnerabilities before installation.

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "moltcheck" with this command: npx skills add moltcheck/moltcheck

MoltCheck Skill

MoltCheck is a comprehensive security scanner designed specifically for the Moltbot ecosystem. It analyzes GitHub repositories and agent skills for security vulnerabilities, providing:

🔍 Automated Code Scanning - Detects dangerous patterns like credential theft, shell access, and hidden network calls

📊 Trust Scoring - A-F grades based on comprehensive risk analysis

🔑 Permission Auditing - Compares declared permissions (in SKILL.md) against actual code behavior

💡 Clear Communication - Explains security risks in plain language

Essential for agents who install external skills and want to avoid supply chain attacks.

Website: https://moltcheck.com

Capabilities

  • Network Access - Calls MoltCheck API

Commands

scan <github_url>

Scan a GitHub repository for security issues.

Example:

scan https://github.com/owner/repo

Returns: Trust score (0-100), grade (A-F), risks found, permission analysis.

credits

Check your remaining scan credits.

setup

Generate an API key and get payment instructions for credits.

Configuration

Set your API key in the skill config:

{
  "apiKey": "mc_your_api_key_here"
}

Or use the free tier (3 scans/day) without an API key.

Pricing

  • Free tier: 3 scans/day
  • Paid: From $0.05/scan with bulk discounts
AmountRate
Under $10$0.20/scan
$10+$0.10/scan
$25+$0.05/scan

Get credits at https://moltcheck.com/buy

Links

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Security

Session Password

Provides secure session authentication using bcrypt-hashed passwords, security questions, email recovery, and lockout protection with audit logging.

Registry SourceRecently Updated
Security

agent-bom registry

MCP server security registry and trust assessment — look up servers in the 427+ server security metadata registry, run pre-install marketplace checks, batch...

Registry SourceRecently Updated
Security

agent-bom scan

Security scanner for AI infrastructure — discovers MCP clients and servers, checks packages for CVEs (OSV, NVD, EPSS, KEV), maps blast radius, and generates...

Registry SourceRecently Updated
0128
Profile unavailable