other
Warning
- Location
references/post-strategy.md:1- Finding
Deliberate Concealment of AI-Generated Reddit Content
- Content
View full analysis
- Remediation
View remediation
Security audit
Reddit Engagement
Security checks for vulnerabilities and agentic risk
Overview
This skill can post, comment, and upvote on Reddit while intentionally making AI-generated content look human-authored.
Review this skill carefully before installing. It is not malware, but it is designed to publish and vote from your Reddit account and includes guidance for making AI-generated content appear human. Only use it where you are comfortable with automated Reddit activity, verify every post/comment before submission, avoid pre-authorized immediate sending, and make PERSONA.md logging explicit, minimal, and deletable.
Vulnerability Patterns
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
- Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs
Findings (2)
other
Warning
- Location
references/comment-strategy.md:15- Finding
Comment Strategy Can Induce Unsupported Personal Anecdotes
- Content
View full analysis
- Remediation
View remediation
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
- MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (13)
Ssd 3
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The skill instructs the agent to read persona facts from PERSONA.md and then log posted stories/content for future reuse prevention, creating a persistent memory of personal attributes and generated outputs. This expands the surface for privacy leakage, unintended retention, and cross-task profiling, especially because the stored facts are later reused in public-facing Reddit content.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
The instruction references a specific Chinese-language table name, "已使用的故事/内容记录," as a required destination for logging after posting. This imposes a specific language/locale requirement in the skill instructions without user opt-in or a documented regional justification, which matches the language/locale policy violation criteria.
- Content
Ssd 3
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
The workflow explicitly requires updating PERSONA.md with used content to maintain consistency across future posts, which is a form of persistent tracking of user/persona-linked data. In context, this is more dangerous because the skill is designed for social-media posting, so retained persona information can be repeatedly surfaced in public content or exposed to other skills and workflows in the workspace.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 91% confidence
- Finding
The workflow says to update the PERSONA.md table named "已使用内容登记," which hard-codes a Chinese-language label into the operating procedure. Because the skill does not offer a language choice or explain why Chinese is required, this is a natural-language locale policy violation.
- Content
Ssd 3
Medium
- Category
- Not specified by scanner
- Confidence
- 93% confidence
- Finding
Logging persona-fact usage for comments extends the same persistence behavior to another workflow, increasing the amount of user-linked context accumulated over time. Because comments are frequent and contextual, this can create a richer behavioral profile and raise the chance of accidental disclosure, unauthorized reuse, or inconsistent consent boundaries.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 90% confidence
- Finding
The comment flow instructs the operator to update the PERSONA.md table "已使用内容登记" if persona facts were used. This is a repeated locale-specific instruction embedded in the skill and lacks any documented user choice or regional justification.
- Content
Context-Inappropriate Capability
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
This guidance explicitly teaches the agent to make generated Reddit comments appear less like AI and more like authentic human users by suppressing typical AI markers and adopting deceptive social cues. In the context of a Reddit engagement skill, that is materially dangerous because it facilitates covert impersonation and platform manipulation beyond mere UI automation reliability.
- Content
Natural-Language Policy Violations
Medium
- Category
- Not specified by scanner
- Confidence
- 94% confidence
- Finding
Forcing a specific casual/slang-heavy persona without user opt-in is unsafe because it steers outputs toward a manipulative social-engineering style that may misrepresent the user's voice and increase the plausibility of synthetic comments. In this skill, the issue is amplified because the comments are intended for public posting on Reddit, where style-shaping is part of making automation less detectable.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 92% confidence
- Finding
The skill instructs the agent to append generated subreddit profiles directly into
references/sub-archives.md, which is a persistent local repository file. Because the appended content is derived from external Reddit pages and runtime analysis, this creates an unauthorized state-changing side effect and can persist untrusted or incorrect data into the codebase without explicit user approval or review.- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The guidance explicitly instructs the AI to be 'indistinguishable from a human' on Reddit, which is deceptive impersonation rather than ordinary automation support. In the context of a Reddit engagement skill, this increases the risk of covert manipulation, spam evasion, and misleading users or platform participants about the origin of content.
- Content
Missing User Warnings
Medium
- Category
- Not specified by scanner
- Confidence
- 96% confidence
- Finding
The instruction to make generated Reddit content appear human-authored without any transparency warning encourages covert AI participation. In a social platform setting, lack of disclosure magnifies harm because readers may rely on perceived authenticity when evaluating opinions, endorsements, or community sentiment.
- Content
Ssd 4
Medium
- Category
- Not specified by scanner
- Confidence
- 98% confidence
- Finding
The document systematically trains the agent to disguise AI traits by introducing 'imperfection,' emotional bias, impulsive phrasing, and subreddit-specific social camouflage. In the context of a Reddit engagement automation skill, this is especially dangerous because it operationalizes deceptive social participation at scale, enabling manipulation of discourse while evading detection.
- Content
Description-Behavior Mismatch
Medium
- Category
- Not specified by scanner
- Confidence
- 95% confidence
- Finding
This section shifts from browser-automation reliability into persuasion and content-manipulation tactics, including emotional framing, stylistic disguise, and engagement optimization. That materially broadens the skill into behavioral manipulation, making it usable for astroturfing, spam campaigns, or coordinated inauthentic activity rather than simple UI automation.
- Content