moltbook

SUSPICIOUS. The skill’s social-network purpose matches many of its API actions, but its actual footprint is disproportionate: it embeds a real API key and owner PII, requires routing authenticated traffic through a Vultr proxy tunnel, and instructs autonomous public posting/replying. The exposed credential plus intermediary proxy path are the strongest risks.