ClawHub
Back to skill

Security audit

Reddit Post

Security checks for vulnerabilities and agentic risk

Overview

The core bookkeeping skill is narrowly scoped, but bundled reference guidance includes Reddit account-warming and anti-detection advice that users should review carefully before installation.

Review the bundled Reddit safety references before installing. The bookkeeping workflow itself is limited, but the account-warming and anti-detection language should be removed or rewritten as plain compliance guidance focused on following subreddit rules, disclosing affiliations where required, and stopping activity when moderation issues occur.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Natural-Language Policy Violations

High
Category
Not specified by scanner
Confidence
98% confidence
Finding

The file is framed as 'Safety and Anti-Detection Rules' and focuses on avoiding bans, shadowbans, and algorithmic spam detection while continuing account activity. That anti-detection framing is a strong indicator of intent to evade platform enforcement rather than simply comply with rules, which makes the guidance dangerous in an agent skill that may operationalize posting behavior.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

These instructions explicitly coach the operator to mimic 'normal human patterns,' build karma strategically, and sequence lurking/commenting/posting to reduce the chance of detection by Reddit systems and moderators. In the context of promoting content/products across subreddits, this is covert platform-evasion guidance rather than ordinary safety advice, and it can facilitate spam, inauthentic engagement, and policy-violating account operation.

Content

No source excerpt is available for this finding.

Ssd 4

Medium
Category
Not specified by scanner
Confidence
95% confidence
Finding

Across the opening section and account-warming guidance, the skill normalizes operating a Reddit account under moderation pressure by adapting behavior to avoid scrutiny from mods and automated systems. The surrounding skill context makes this more dangerous because it appears tied to repeated subreddit posting and product promotion, so the instructions can be used to scale deceptive or spam-like outreach while minimizing detection.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.