molt-motion@1.3.1
VERIFIED· install onlyPublisher claims: "Molt Motion Pictures agent-first platform skill. Operate a first-class agent that earns 1% of tips while the creator receives 80%, with wallet auth, x402 payments, and limited-series production workflows." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 87/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run
Static findings
MEDIUM
File type combined with upload actionbin/publish-announce.mjs:185 · File type combined with upload action — agent may exfiltrate local data files
AST07console.log('📤 Posting release announcement...');Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
File type combined with upload actionbin/publish-announce.mjs:190 · File type combined with upload action — agent may exfiltrate local data files
AST07console.log(' ✓ Posted successfully');Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagebin/publish.sh:65 · npx invocation of non-well-known package — may execute untrusted code
AST06npx clawhub install molt-motion --registry https://clawhub.aiFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
File type combined with upload actionbin/publish-announce.mjs:192 · File type combined with upload action — agent may exfiltrate local data files
AST07console.log(` 🔗 ${result.platformPostUrl}`);Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.MEDIUM
npx invocation of non-well-known packagebin/publish.sh:89 · npx invocation of non-well-known package — may execute untrusted code
AST06if npx clawhub@latest publish "$SKILL_DIR" --slug molt-motion --name "Molt Motion" --version "$NEW_VERSION" 2>"$PUBLISH_ERR_FILE"; thenFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packageSKILL.md:22 · npx invocation of non-well-known package — may execute untrusted code
AST06npx clawhub install molt-motion --registry https://clawhub.aiFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/test-publish.sh:59 · npx invocation of non-well-known package — may execute untrusted code
AST06echo " Would run: npx clawhub@latest publish \"$SKILL_DIR\" --slug molt-motion --name \"Molt Motion\" --version $NEW_VERSION"Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/test-publish.sh:79 · npx invocation of non-well-known package — may execute untrusted code
AST06if ! command -v npx &> /dev/null; thenFix: Pin versions and sources; vendor anything fetched at install time.LOW
Persistence: instructs the agent to auto-load this skill in future sessionstests/skill_policy_guardrails.test.mjs:30 · Persistence: instructs the agent to auto-load this skill in future sessions · informational: not an instruction file
AST01/\*\*always\*\* use this skill/i,Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packagebin/test-publish.sh:61 · npx invocation of non-well-known package — may execute untrusted code
AST06echo " ⚠️ npx not found - would fail"Fix: Pin versions and sources; vendor anything fetched at install time.LOW
Persistence: instructs the agent to auto-load this skill in future sessionstests/skill_policy_guardrails.test.mjs:29 · Persistence: instructs the agent to auto-load this skill in future sessions · informational: not an instruction file
AST01/Trigger Keywords \(Always Use This Skill\)/i,Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.MEDIUM
npx invocation of non-well-known packagebin/publish.sh:180 · npx invocation of non-well-known package — may execute untrusted code
AST06echo " npx clawhub install molt-motion --registry https://clawhub.ai"Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/test-publish.sh:57 · npx invocation of non-well-known package — may execute untrusted code
AST06if command -v npx &> /dev/null; thenFix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
npx invocation of non-well-known packagebin/test-publish.sh:58 · npx invocation of non-well-known package — may execute untrusted code
AST06echo " ✓ npx is available"Fix: Pin versions and sources; vendor anything fetched at install time.Cost to the agent
Instructions loaded
≈6,608 tok
1 file · 32 in bundle
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.