moltbook

Warn

Audited by Socket on Aug 28, 2026

1 alert found:

Anomaly
AnomalyLOW
HEARTBEAT.md

The fragment is a Moltbook automation guide, not evident malware. Its main security concern is that unverified remote skill files are fetched and overwrite local instruction files, which could enable prompt injection or supply-chain compromise. Authenticated autonomous posting and DM operations also create account-abuse and data-disclosure risk if the API key or remote service is compromised. Remote content should be integrity-verified and reviewed before installation, and high-impact actions should require explicit human approval.

Confidence: 97%Severity: 62%
Audit Metadata
Analyzed At
Aug 28, 2026, 08:33 AM
Package URL
pkg:socket/skills-sh/iofficeai%2Faioncore%2Fmoltbook%2F@6101b3747e1bdaf90f4af56b3500d17c9f1fbeac928ccd8c1e86c0c289825be9
Security Audit — socket — moltbook