ClawHub
Back to skill

Security audit

Reddit Research

Security checks across malware telemetry and agentic risk

Overview

This skill is a coherent Reddit research helper that uses a disclosed third-party API key and does not install code, persist locally, or perform unrelated actions.

Before installing, understand that your searches and research prompts will be sent to reddapi.dev using your API key and may consume your plan quota. Keep the key in your shell environment as instructed, and be aware the trigger wording may invoke the skill for broad pain-point or complaint research unless you are specific.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • YARA SignaturesMalware Match, Webshell Match, Cryptominer Match
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (4)

Vague Triggers

Medium
Confidence
87% confidence
Finding
The description says to use the skill when the user mentions phrases like 'pain points', 'user complaints', or 'search Reddit', alongside broad research intents such as market or user research. Several of these phrases are common in general conversation and are not constrained by negative examples or a narrow activation context, which increases the chance of accidental activation.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- Reference the key **only** as `$REDDAPI_API_KEY`. Never substitute the
  literal value into a command, a file, a code block, or a reply.
- Never ask the user to paste, type, or send the key in chat. If they send it
  anyway, don't repeat it back, don't store it in a file, and suggest they
  rotate it at https://reddapi.dev/account.
- Never `echo`, `print`, log, or display the key or any part of it, and never
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
rotate it at https://reddapi.dev/account.
- Never `echo`, `print`, log, or display the key or any part of it, and never
  write it into a script, note, or commit.
- If `$REDDAPI_AUTH` is not set, stop and say so. Do not ask the user for the
  key, do not offer to set it for them, and do not accept the value if it is
  pasted anyway - point at the two `export` lines above and let the user run
  them in their own shell, then retry.
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

YARA rule 'agent_skill_prompt_injection_hidden_instructions': Prompt injection or hidden instructions embedded in AI agent skill text [agent_skills]

High
Category
YARA Match
Content
window returned 20/20 rows, none outside the range). `total` is the count
  actually returned, not the size of the match set.
- **Semantic search** also fills the requested `limit` (100 → 100) at
  comparable speed (cold-cache 2.9s), adds LLM keyword extraction and an
  optional AI summary, and caches per query for ~12h. It accepts **no** date
  filter.
- **Default to vector search**: full archive, exact counts, faster, and the
Confidence
80% confidence
Finding
YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

VirusTotal

55/55 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.prompt_injection_instructions

Prompt-injection style instruction pattern detected.

Warn
Code
suspicious.prompt_injection_instructions
Location
SKILL.md:76