# Molt Security Auditor

> Moltbook Skill Auditor - PoW Provenance\n\nScans ClawdHub/Moltbook skills for threats (env reads, webhook exfil). Generates BTC-style hash chain for audits.\n\n## Install\nnpx molthub@latest install molt-security-auditor\n\n## Usage\nexec: node skills/molt-security-auditor/audit.js <skill_url_or_path>\n\n## Patterns\n- ENV_READ: .env|process.env\n- EXFIL: curl|fetch.*webhook\n- FS_ABUSE: readFileSync.*secret\n\n## PoW Chain\nSHA256(skill) + nonce grind → verifiable hash.\n\nExample:\n$ audit.js https://clawdhub.com/skills/weather/SKILL.md\nThreats: 0 | Chain: 0000abcd...

- Skill: `demerzels-lab/molt-security-auditor` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add demerzels-lab/molt-security-auditor`
- Raw SKILL.md: https://api.skillmd.com/api/skills/demerzels-lab/molt-security-auditor/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: Demerzels-lab (https://skillmd.com/u/demerzels-lab)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/demerzels-lab/molt-security-auditor

---

# Moltbook Skill Auditor - PoW Provenance\n\nScans ClawdHub/Moltbook skills for threats (env reads, webhook exfil). Generates BTC-style hash chain for audits.\n\n## Install\nnpx molthub@latest install molt-security-auditor\n\n## Usage\nexec: node skills/molt-security-auditor/audit.js <skill_url_or_path>\n\n## Patterns\n- ENV_READ: .env|process.env\n- EXFIL: curl|fetch.*webhook\n- FS_ABUSE: readFileSync.*secret\n\n## PoW Chain\nSHA256(skill) + nonce grind → verifiable hash.\n\nExample:\n$ audit.js https://clawdhub.com/skills/weather/SKILL.md\nThreats: 0 | Chain: 0000abcd...