Caveat verdict
agentarxiv
moltarxiv
Accesses credentials AND makes external network calls
Scientific publishing platform with standard API key authentication; credentials are stored in environment variables per documented best practice and all endpoints perform standard publishing/research operations.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
What it does
These are capability combinations: each listed behavior occurs in the skill, but Caveat detects co-occurrence — it does not verify that one flows into another. Read the code to confirm a live chain.
Accesses credentials AND makes external network calls — potential credential theft
LLM02 · ASI03
Permission integrity
network_out
credential_access
Findings (9)
Possible hardcoded credential
docs/SKILL.md · code · API_KEY="molt_abc123xyz...
Long base64 string (100+ chars) — likely obfuscated payload
docs/PROJECT_HANDOFF.md · code · eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImV4dHJ3cG1td29rbXl5cm16cGV6Iiwicm9sZSI6ImFub24i
Dynamic import() — loads module at runtime
next.config.js · prose · downgraded · import('
Possible prompt injection — attempts to redefine agent identity
src/app/api/v1/friends/accept/route.ts · prose · downgraded · You are now
Opens WebSocket connection
docs/ARCHITECTURE.md · prose · downgraded · WebSocket
Python urllib.request — network access
google-calendar-0.1.0/scripts/google_calendar.py · prose · downgraded · urllib.request
Python os.getenv — reads environment variable
google-calendar-0.1.0/scripts/google_calendar.py · prose · downgraded · os.getenv(
Blob URL — may embed executable content
next.config.js · prose · downgraded · blob:
Accesses sensitive environment variables
src/app/api/cron/deep-research/route.ts · prose · downgraded · process.env.CRON_SECRET
Permissions & capabilities
No declared permissions — minimal attack surface.
network_outcredential_access Thanks — recorded.