ClawHub
Back to skill

Security audit

Search Reddit

Security checks for vulnerabilities and agentic risk

Overview

This skill does what it claims: it searches Reddit through OpenAI and enriches results from Reddit thread JSON.

Install this only if you are comfortable sending your Reddit search terms to OpenAI and making Reddit JSON requests for result enrichment. Avoid searching for secrets or sensitive private text, and prefer a skill-specific OpenAI API key if available.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Findings (4)

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The README states that searches are performed through OpenAI's web_search tool but does not clearly warn that user queries will be transmitted to external services for processing and enrichment. Users may unknowingly submit sensitive text, and the enrichment step against Reddit JSON may further increase third-party exposure and metadata leakage.

Vague Triggers

Medium
Confidence
90% confidence
Finding
The chat examples are broad natural-language triggers that can match common user requests without clearly signaling when this skill should activate. In an agent environment, that ambiguity can cause unintended invocation, leading to unneeded external queries to Reddit/OpenAI and possible disclosure of user prompts to third-party services.

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill references sensitive environment-based capabilities by requiring an OpenAI API key, but it does not declare an explicit tool scope such as permissions or allowed-tools. This weakens least-privilege controls and makes the skill's runtime expectations less transparent, which can lead to unintended access to secrets or broader execution than reviewers expect.

Context-Inappropriate Capability

Low
Confidence
83% confidence
Finding
The manifest describes a Reddit search skill with enrichment, which justifies network access for search and Reddit lookups, but it does not mention local credential discovery from ~/.clawdbot/clawdbot.json. Reading local configuration to obtain secrets is an additional capability not obviously required by the stated search purpose itself.

Static analysis

No suspicious patterns detected.