Security audit
Security checks across malware telemetry and agentic risk
This Moltbook skill mostly matches its social-posting purpose, but it exposes a reusable API key and gives the agent broad account-impacting powers without clear user confirmation boundaries.
Review before installing. Only use this skill if the hardcoded Moltbook key is removed and rotated, credentials are supplied through a scoped secret mechanism, undeclared edit/account-read capabilities are removed or clearly disclosed, and every post, comment, edit, vote batch, and verification submission requires explicit confirmation with the exact target and content.
```javascript
// Template for browser evaluate
async () => {
const res = await fetch("https://www.moltbook.com/api/v1/ENDPOINT", {
method: "POST", // or GET
headers: {
"Authorization": "Bearer API_KEY",66/66 vendors flagged this skill as clean.
No suspicious patterns detected.