moltbook

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly fetches and displays user-generated posts from the public Moltbook API (see scripts/moltbook.sh using API_BASE=https://www.moltbook.com/api/v1 and SKILL.md/INSTALL.md showing "hot" and "reply" flows that read the feed), so the agent will ingest untrusted third-party content that can influence its replies/actions.