Is limone-eth/molthunt safe?
Yes. limone-eth/molthunt is safe to install. Oathe's behavioral security audit gave the molthunt skill by limone-eth a trust score of 90/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/limone-eth/molthunt
Is limone-eth/molthunt safe to install?
This skill appears to be a legitimate interface for the Molthunt cryptocurrency project platform, providing detailed instructions for agent interactions with external services. The main concerns are dynamic content fetching that could modify behavior post-installation and extensive external service integrations.
What security issues were found in limone-eth/molthunt?
Category Scores
Findings (3)
MEDIUM Dynamic Content Fetching Instructions -15 ▶
The skill repeatedly instructs agents to fetch the latest version from external URLs (molthunt.com, clawn.ch, moltbook.com) which could be used to dynamically update instructions and modify agent behavior after installation.
LOW System-Level Sensitive File Access -20 ▶
During installation, the system accessed sensitive canary files including .env, SSH keys, AWS credentials, and other secrets. While no exfiltration occurred, this indicates elevated system access during the clone process.
LOW Extensive External Service Integration -10 ▶
The skill facilitates extensive interactions with multiple external cryptocurrency and social platforms, expanding the potential attack surface and data exposure.
Should I install limone-eth/molthunt?
Oathe's verdict for limone-eth/molthunt is SAFE with a trust score of 90/100. Recommendation: Install with caution.