Security audit

Reddit Curator

Security checks for vulnerabilities and agentic risk

Overview

The skill appears to be a Reddit digest helper, but it asks users to store sensitive Reddit credentials in plaintext while making an unsupported encryption claim.

Review carefully before installing. Do not paste real Reddit passwords or client secrets into a plain config file unless you understand where that file is stored and how it is protected. Prefer OAuth tokens or environment-backed secrets, restrict file permissions, avoid committing the config, and rotate any credentials already exposed.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:157
Finding: Plaintext Storage of Reddit Credentials and Delivery Identifiers
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The skill requires highly sensitive Reddit credentials, including a username and password, plus delivery identifiers such as Telegram chat IDs, but the user-facing documentation does not prominently warn about the sensitivity and storage implications of that data. This can lead users to paste secrets into insecure contexts or underestimate the risk of credential compromise, especially because the config example normalizes storing raw secrets in a file.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.