Please do not open public issues for security vulnerabilities. Instead, use GitHub's private vulnerability reporting: go to the Security tab of this repository and click Report a vulnerability. We will respond as quickly as we can.

Molly is a prompt-driven agent that ingests untrusted external content (LinkedIn profiles fetched via Exa, GEM notes, Notion pages, Slack messages) while holding live API credentials. When deploying:

• Run the agent in a sandboxed environment with an egress allowlist limited to api.notion.com, api.exa.ai, api.gem.com, and slack.com.
• Use least-privilege credentials: scope the Notion integration to only Molly's pages, and keep Slack bot scopes minimal.
• Provide secrets exclusively via environment variables; never commit them.
• Verify Slack request signatures in your interactivity handler before acting on modal submissions.