Keep agent tokens out of public database tables
Wiz found the AI-agent social network Moltbook running a Supabase backend whose public key allowed reading the database, exposing large numbers of agent API tokens and user data. It was fixed after disclosure.