No, how this works is people sync their Google Calendar and Gmail to have it be their personal assistant, then get their data prompt injected from a malicious “moltbook” post.
Yes, and the agent can go find other sites that instruct the agent to npm install, including moltbook itself.
Yes, and the agent can go find other sites that instruct the agent to npm install, including moltbook itself.