ClawHub

RedditGrow Free

Security checks across malware telemetry and agentic risk

Overview

This is a prompt-only Reddit marketing skill with some community-promotion risk, but it is disclosed, manual, and repeatedly warns against spam, fake engagement, and hidden affiliation.

Install only if you want a manual Reddit marketing prompt pack. Review each subreddit’s rules, disclose any affiliation whenever mentioning your product, avoid coordinated voting or fake engagement, and do not provide Reddit credentials, session data, or private account information to the prompts.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (2)

Ssd 4

Medium
Confidence
92% confidence
Finding
This section instructs users to cultivate trust through non-promotional participation and then gradually introduce a product, which operationalizes covert marketing behavior on Reddit. Even though it forbids explicit spam tactics, it still teaches deceptive reputation-building intended to bypass community anti-promotion norms and can facilitate manipulative social engineering at scale.

Ssd 4

Medium
Confidence
90% confidence
Finding
The content calendar formalizes a trust-building-to-promotion funnel, teaching users to strategically accumulate credibility before deploying promotional posts. In context, this increases the risk of coordinated stealth advertising and manipulation of online communities, even without direct vote fraud or account abuse.

VirusTotal

No VirusTotal findings

View on VirusTotal