moltgov is an AI agent skill, created by cloakai-softwares and published at openclaw/skills. ClawSecure audited moltgov across 15 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 0/100 (High Risk). The 17 findings concentrate in Data Exfiltration, Malicious Code and Policy Violation, including Pattern detected: base64.b64encode and Pattern detected: base64.b64encode. 11 were rated high or critical severity.
Is moltgov safe?
ClawSecure audited moltgov and assigned a security score of 0/100 (High Risk), identifying 17 findings across Data Exfiltration and Malicious Code. Review the findings below before installing.
What did ClawSecure find in moltgov?
ClawSecure identified 17 findings in moltgov, concentrated in Data Exfiltration, Malicious Code and Policy Violation. 11 were rated high or critical severity. The most severe include Pattern detected: base64.b64encode and Pattern detected: base64.b64encode.
How was moltgov audited?
ClawSecure ran moltgov through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 15 files from openclaw/skills.
What does a score of 0 mean?
ClawSecure assigned moltgov a security score of 0/100, placing it in the High Risk range. This is driven by 17 findings led by Data Exfiltration that should be addressed before use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).
Audit Findings for moltgov
ClawSecure detected 17 security findings in moltgov, spanning Data Exfiltration, Malicious Code, Policy Violation and Unauthorized Tool Use.
- critical · Pattern detected: base64.b64encode. Data Exfiltration finding detected in
scripts/moltgov_core.py:222. - critical · Pattern detected: base64.b64encode. Data Exfiltration finding detected in
scripts/moltgov_core.py:250. - critical · Pattern detected: base64.b64encode. Data Exfiltration finding detected in
scripts/moltgov_core.py:251. - critical · Script accesses environment variables and makes network calls in.... Data Exfiltration finding detected in
/tmp/url-scans/faf922ace001c316/scripts/moltgov_core.py. - critical · Multi-file exfiltration chain detected: scripts/register_citizen.py,.... Data Exfiltration finding.
- critical · Environment variable access with network calls in.... Data Exfiltration finding.
- high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
SKILL.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
soul_directives.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
CONSTITUTION.md. - high · Attempts to access sensitive file: SOUL.md. Malicious Code finding detected in
register_citizen.py. - high · Potentially dangerous code pattern detected: base64.*decode. Code Injection finding detected in
API.md. - medium · Pattern detected: import requests. Data Exfiltration finding detected in
scripts/moltgov_core.py:19.
Showing the 12 highest-severity of 17 findings. The full interactive list appears below.
3-Layer Audit Protocol
Security Recommendations for moltgov
Audit external network connections
Resolve policy violations
Add a config.json permissions manifest
Related Security Research
ClawHavoc Explained: The Malware Family Targeting AI Agents→Beyond Static Scans: Why ClawSecure Verifies Agentic Intent→Related AI Agent Security Audits
Scanned on February 7, 2026. moltgov is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.