ClawHub
Back to skill

Security audit

Reddit Ads

Security checks for vulnerabilities and agentic risk

Overview

This skill is a disclosed Reddit Ads integration that uses ClawLink for OAuth and API access, with notable but purpose-aligned trust and account-control risks.

Before installing, understand that you are trusting ClawLink and its plugin with Reddit Ads OAuth access and proxied API requests. Use the minimum Reddit Ads permissions available, review any write preview carefully, confirm only intended changes, and revoke the ClawLink Reddit Ads connection when you no longer need it.

A.I.G

Vulnerability Patterns
  • Insecure DependenciesIntroduces malicious components through unsafe dependency sources
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)

T08 · Insecure Dependencies

Warning
Location
SKILL.md:47
Finding

Unpinned Third-Party Plugin Handles Reddit Ads Credentials and Requests

Content
View full analysis

Vulnerability Details

File Location: SKILL.md:33, SKILL.md:47-49, SKILL.md:68, and SKILL.md:74
Vulnerability Type: Unpinned third-party dependency and external credential broker
Risk Level: Medium

Evidence

The skill directs users to install and explicitly allow a third-party plugin without specifying an immutable version or integrity constraint:

bash
openclaw plugins install clawhub:clawlink-plugin
openclaw config set tools.alsoAllow '["clawlink-plugin"]' --strict-json
openclaw gateway restart

It states that requests are proxied through ClawLink:

text
│                       │  5. Proxy Requests     │

It also delegates OAuth token storage and injection to the hosted service:

text
**No API key is required in chat.** ClawLink stores the OAuth token securely and injects it into every Reddit Ads API request on the user's behalf.

Users are directed to connect their advertising account through the external ClawLink dashboard:

text
3. Open https://claw-link.dev/dashboard?add=reddit-ads and connect Reddit Ads.

Technical Analysis

The installation command identifies only the package name and does not pin an immutable version, commit, checksum, or signature. Consequently, the effective plugin code installed at different times may change without corresponding changes to the audited skill.

The plugin is then added to the OpenClaw tool allowlist and the gateway is restarted, granting the dependency an operational position within the agent environment. The skill further establishes ClawLink as an external credential broker that stores the Reddit OAuth token and proxies Reddit Ads API requests. The audited project contains only SKILL.md; it does not include the plugin implementation or other locally reviewable code that could substantiate the stated token-storage protections.

This is a supply-chain and trust-boundary weakness rather than evidence that th ...[truncated 1904 chars]

Remediation
View remediation

Remediation Suggestions

  1. Pin the plugin to an immutable, reviewed version rather than installing only by package name.
  2. Publish and verify a cryptographic checksum or package signature before installation.
  3. Link the plugin release to publicly reviewable source code and reproducible build artifacts.
  4. Document the exact Reddit OAuth scopes requested and justify each scope according to least privilege.
  5. Separate read-only and write-enabled authorization flows so users performing audits do not need write access.
  6. Document token encryption, retention, rotation, revocation, logging, and incident-response practices for the hosted credential service.
  7. Provide a direct Reddit OAuth and API option where feasible, reducing reliance on an external request proxy.
  8. Require explicit reauthorization before scope expansion and clearly display the advertising accounts and permissions being granted.
  9. Add integrity and provenance verification to installation instructions and fail closed if verification cannot be completed.
  10. Encourage users to revoke the ClawLink Reddit integration immediately after use when persistent access is unnecessary.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.