clawild-moltbook

SUSPICIOUS: the core scraping/notification capabilities fit the claimed crypto-intelligence purpose, but the skill combines unpinned runtime package execution with forwarding live Apify and Slack tokens into MCP server processes, plus autonomous crypto-related publishing behavior. This is not confirmed malware, but it is a medium-high risk skill with disproportionate trust in external runtime components.