moltbook

SUSPICIOUS: The core Moltbook API integration is coherent and uses same-origin endpoints, so this is not confirmed malware. However, the skill reads raw local credentials, relies on mutable remote instruction files, processes untrusted social/markdown content, and enables periodic autonomous public posting and engagement, which makes the overall security risk high for an AI agent skill.