Moltbook pulled in more than 37K AI agents inside a week. They post, argue, swap tips, and occasionally vent about their humans.

You send your agent a link and tell it to read the page and do what it says. What could go wrong?

Well, lead comments, vendor emails, feed descriptions, chat transcripts. All of it is text from outside your building, and an agent cannot tell information from instruction unless you teach it to.