Reddit Search But Free

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:13 PM UTC
• Version:
  1.0.0

Overview

This is a disclosed Reddit research CLI that makes expected external lookups and keeps local cache/watchlist data, with no evidence of hidden credential access, destructive behavior, or covert exfiltration.

Install only if you are comfortable with Reddit search terms, usernames, subreddit names, and research topics being sent to the selected public provider and cached locally. Avoid sensitive personal investigations, keep watchlist entries intentional, clear the cache after sensitive work, and consider preinstalling or pinning tsx instead of relying on unpinned npx execution.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (2)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 93% confidence
• Finding: The skill explicitly advertises live access to Reddit, PullPush, and Arctic Shift and instructs the agent to run networked CLI commands, yet no declared permissions are present. This creates a trust and policy gap: an orchestrator or reviewer may believe the skill is local-only while it can actually exfiltrate prompts or retrieve unvetted remote content, increasing the chance of unintended data exposure or unsafe agent behavior.

Vague Triggers

Medium

• Confidence: 85% confidence
• Finding: The invocation guidance is broad enough to trigger on generic requests like 'find solutions to problems' or 'research any topic,' not just clearly Reddit-specific tasks. That over-breadth can cause the agent to route ordinary research prompts into this network-enabled skill unnecessarily, pulling in untrusted social content and causing unexpected external requests or lower-integrity answers.

VirusTotal

66/66 vendors flagged this skill as clean.