Security audit

Reddit Cli

Security checks for vulnerabilities and agentic risk

Overview

The skill does what it says, but it asks users to copy live Reddit session cookies into persistent shell files, which exposes sensitive account credentials more broadly than necessary.

Review this before installing. The CLI appears read-only and not malicious, but do not put Reddit session cookies in ~/.bashrc or ~/.zshrc. Treat REDDIT_SESSION and TOKEN_V2 like account passwords, provide them only for the command that needs them, prefer a secret manager or Reddit OAuth-based tool where possible, and revoke the Reddit session if the cookies may have been exposed.

A.I.G

Vulnerability Patterns

Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:39
Finding: Persistent plaintext storage and broad process exposure of Reddit session credentials
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The README explicitly instructs users to extract live Reddit authentication cookies from the browser and persist them in shell startup files, which increases the chance of credential theft, accidental disclosure, and long-term compromise of the Reddit account. Because session cookies can function as bearer credentials, anyone who obtains them may be able to act as the user until the session is revoked or expires.
Content: No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

Category: MCP Least Privilege
Confidence: 88% confidence
Finding: The skill documents use of environment variables containing live Reddit session cookies, but it does not declare any tool scope or permissions boundary indicating access to environment data. That mismatch increases the risk that an agent or surrounding runtime could access sensitive credentials implicitly, making secret exposure or misuse harder to audit and constrain.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 96% confidence
Finding: The documentation instructs users to place Reddit session cookies in ~/.bashrc, which persists bearer-style authentication material in a broadly accessible shell startup file. If that file is read by other tools, exposed in backups, logged, or sourced in unintended contexts, an attacker could hijack the Reddit account without needing a password or MFA.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.