ClawHub
Back to skill

Security audit

Keyapi Reddit User Analysis

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate KeyAPI Reddit analysis skill, with cautions around local cache files, token storage, and a reusable runner that can call broader KeyAPI tools if invoked that way.

Install only if you are comfortable sending Reddit lookup queries to KeyAPI with your KEYAPI_TOKEN. Use the documented --platform reddit commands, keep any .env file private, and use --no-cache or delete .keyapi-cache when you do not want results retained locally.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (4)

Description-Behavior Mismatch

High
Confidence
96% confidence
Finding
The script is a generic MCP runner that can invoke any KeyAPI tool for any platform, while the skill is described as Reddit user/subreddit analysis. This scope mismatch is dangerous because it enables capabilities far beyond the declared purpose, undermining user trust and allowing access to unintended APIs or data flows if the skill is approved under narrower assumptions.

Context-Inappropriate Capability

Medium
Confidence
88% confidence
Finding
Listing all tools and fetching arbitrary schemas exposes discovery capabilities unrelated to the stated Reddit-analysis function. In a constrained skill context, this increases the attack surface by helping users or downstream agents enumerate hidden or more powerful actions available on the backend.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The skill instructs users to cache retrieved Reddit user and community data to local disk without prominently warning about persistence, retention, or sensitivity. Even if the data is public, local caching can create privacy, compliance, and data-handling risks by storing profiling data, search results, and community intelligence in a recoverable filesystem location.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The script interactively captures a bearer token and writes it in plaintext to a local .env file without prompting for consent, warning about persistence, or setting restrictive permissions. This can lead to credential exposure through source control, shared workspaces, backups, or other local users/processes reading the file.

Static analysis

No suspicious patterns detected.