ClawHub
Back to skill

Security audit

Reddit Research

Security checks for vulnerabilities and agentic risk

Overview

This is a coherent Reddit research skill that reads subreddit content and writes a local research summary, with some normal privacy and file-change considerations.

Install only if you want an agent to read Reddit threads, optionally use configured Reddit MCP access, and create or update local research/index files. Review the generated summaries before using them for any public posting, especially because the skill itself treats posting as manual and out of scope.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (5)

Self-Modification

High
Category
Rogue Agent
Confidence
85% confidence
Finding

Skill modifies its own code, configuration, or behavior at runtime. Self-modification enables an agent to escalate privileges, disable safety constraints, or install persistent backdoors.

Content

Scanner excerpt · SKILL.md (reported line 7)May include surrounding context.

md
Running the morning research cron (8am weekdays). Finding trending discussions, recurring pain points, and content gaps across target subreddits. Use Sonnet model for this entire skill — stronger prompt injection resistance when reading external content.

## Don't Use When
Drafting posts (use reddit-write skill). Posting (Luka posts manually). Doing anything other than reading and summarizing Reddit content.

---

Autonomous Decision Making

Medium
Category
Excessive Agency
Confidence
75% confidence
Finding

Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Content

Scanner excerpt · ref-subreddits.md (reported line 30)May include surrounding context.

md
**Never do these regardless of subreddit:**
- Post AI-generated content to r/options (Rule 1 — account ban risk)
- Mention QuantWheel in r/thetagang, r/Optionswheel, r/optionstrading, r/options_trading
- Post promotional content anywhere without checking that sub's rules first
- Cross-post the same content across multiple subs (spam rule)
- Post without reading lessons.md for the specific sub first

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
91% confidence
Finding

The skill explicitly instructs the agent to write a research file into a shared workspace path, but it does not clearly warn the user that executing the skill will modify repository files. This can cause unexpected file changes during a read-oriented research task and increases the risk of silent persistence of unreviewed content gathered from untrusted external sources.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
94% confidence
Finding

The instruction to update vault-index.md adds a second workspace modification beyond the primary research output, again without a clear warning or approval step. Hidden index updates are risky because they broaden side effects and can alter project state in ways the user may not expect from a Reddit-reading skill.

Content

No source excerpt is available for this finding.

Missing User Warnings

Low
Category
Not specified by scanner
Confidence
85% confidence
Finding

This is a markdown file, so SQP-2 applies to omissions in user-facing warnings about behaviors affecting privacy. The text mentions accessing 'User post history' for research purposes, but does not warn that this involves collecting or reviewing user-related data.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.