joko-moltbook

SUSPICIOUS: the overall workflow is coherent for a queue-based posting agent, but the install/execution model is risky. It relies on unpinned npm-fetched MCP servers, forwards multiple tokens into those processes, and includes autonomous posting/notification behavior. The Apify package/docs mismatch further reduces trust, though there is no clear evidence of credential theft or intentional exfiltration.