Reddit Search

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 5:49 PM UTC
• Version: 1.2.0

Overview

This skill is a disclosed Reddit search integration using Xpoz MCP, with the main caution being an unpinned npm tool dependency.

Install only if you are comfortable using Xpoz as a third-party Reddit search provider and installing the mcporter npm package. Prefer a reviewed or pinned mcporter version where possible, and run it with normal least-privilege safeguards because searches and exports are sent through Xpoz MCP.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: SKILL.md:8

Finding

Unpinned npm Dependency Permits Unreviewed Supply-Chain Changes

Content

View full analysis

Vulnerability Details

File Location: SKILL.md, line 8
Vulnerability Type: Unpinned third-party npm dependency
Risk Level: Medium

Vulnerable Code Snippet:

json

"install": [{"id": "node", "kind": "node", "package": "mcporter", "bins": ["mcporter"], "label": "Install mcporter (npm)"}],

Technical Analysis

The installation declaration references the npm package mcporter without specifying an exact version or an integrity hash. Consequently, installation can resolve to whichever package release the configured npm registry serves at that time, rather than to a version that was reviewed with this Skill.

If the package publisher, publisher account, or registry delivery path is compromised, a malicious package release could be installed without any modification to the audited SKILL.md. The effective executable behavior may therefore change after review. The audit found no evidence that the current package is malicious; the vulnerability is the absence of controls that ensure a stable and verified dependency.

Attack Path

1. An attacker compromises the mcporter publisher account, gains control of the package, or compromises the dependency delivery path.
2. The attacker publishes a malicious release under the expected package name.
3. A user installs this Skill's required dependency after the malicious release becomes the version selected by npm.
4. The unpinned declaration resolves and installs the attacker-controlled release.
5. Malicious code may execute during an npm lifecycle script or when the Agent subsequently invokes mcporter.
6. The payload operates with the permissions of the user or Agent process that performed the installation or command invocation.

Impact Assessment

Successful exploitation could execute arbitrary code under the installing user's privileges. Depending on the host environment and available permissions, this could expose Agent-accessible files, environm ...[truncated 408 chars]

Remediation

View remediation

Remediation Suggestions

1. Pin mcporter to a reviewed, exact version rather than allowing floating resolution.
2. Record and verify the package integrity digest through an npm lockfile or an equivalent integrity-verification mechanism.
3. Configure installation to use an explicitly trusted npm registry and document the expected package publisher.
4. Disable npm lifecycle scripts during installation when they are not required; otherwise, review all lifecycle scripts before approving an update.
5. Perform dependency updates through a controlled review process that checks package provenance, release changes, transitive dependencies, and published artifacts.
6. Run installation and subsequent tool execution in a least-privileged sandbox with restricted filesystem, credential, and network access.
7. Document the reviewed package version and integrity value directly in the Skill's installation metadata or associated deployment configuration.

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.