Security audit

Reddit Post Search

Security checks across malware telemetry and agentic risk

Overview

This skill does the advertised Reddit post collection, but users should know it contacts Reddit directly and may keep limited local troubleshooting notes.

Install only if you are comfortable with the agent making Reddit JSON API requests from the browser context for explicit Reddit collection tasks. Review the broad trigger wording and the local memory-file behavior if your environment restricts external requests or persistent workspace notes.

SkillSpector

By NVIDIA

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration

Findings (5)

Lp3

Medium

Category: MCP Least Privilege
Confidence: 87% confidence
Finding: The skill invokes Python scripts that fetch Reddit data over the network, yet no corresponding permission is declared. This creates a transparency and governance gap: operators may approve or run the skill believing it has no network behavior, while it can still perform external requests and potentially expose prompts, parameters, or usage patterns to third-party services.

Description-Behavior Mismatch

Medium

Confidence: 93% confidence
Finding: The documentation states the skill only reads data already visible in the browser and does not bypass access controls, but the actual mechanism performs direct API fetches. This mismatch is dangerous because it can mislead users, reviewers, or policy engines about the true trust boundary and data flows, causing the skill to be used in contexts where external retrieval was not intended.

Intent-Code Divergence

Medium

Confidence: 91% confidence
Finding: Contradictory boundary documentation undermines safe review and enforcement: the skill presents itself as browser-only visible-data automation while instructing execution of scripts that obtain data via network requests. Such inconsistencies increase the risk of accidental policy bypass, incorrect approval, and unsafe reuse in environments with stricter data-handling assumptions.

Vague Triggers

Medium

Confidence: 78% confidence
Finding: The invocation text is broad enough to match ordinary conversation about Reddit, scraping, monitoring, or posts, which can cause the skill to trigger unexpectedly. Unexpected activation is risky because it may initiate external requests, collect content, or start batch operations without the user's clear intent to run this specific data-extraction workflow.

Missing User Warnings

Medium

Confidence: 89% confidence
Finding: The skill instructs reading from and appending to a local memory file, but does not provide a clear user-facing warning that it will modify the filesystem. Silent local writes are dangerous because they create persistent side effects, may leak operational details across tasks, and can violate user expectations or environment policies about stateful storage.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.