Security audit
Security checks for vulnerabilities and agentic risk
This skill is mostly coherent, but it can publish public Reddit posts through a connected account without a built-in confirmation or dry-run safeguard.
Install only if you are comfortable giving the agent Reddit posting authority through your Late account. Use environment variables or a secret manager where possible, restrict the connected Reddit account, and require the agent to show the final title/body/subreddit and get your explicit approval before running create-post, especially with --publish-now.
A second description-behavior mismatch indicates the skill may expose undocumented capabilities while omitting claimed safeguards and core functions. In a posting skill, undocumented ad-library retrieval and missing posting-validation steps weaken user trust and can conceal data access patterns or operational risks from reviewers.
A second description-behavior mismatch indicates the skill may expose undocumented capabilities while omitting claimed safeguards and core functions. In a posting skill, undocumented ad-library retrieval and missing posting-validation steps weaken user trust and can conceal data access patterns or operational risks from reviewers.
The skill requests sensitive capabilities implicitly through environment variables, local file reads, and network access, but does not declare an explicit tool scope or permission boundary. That makes it harder for users and enforcement systems to understand what the skill can access, increasing the risk of over-broad execution and secret exposure in a skill that handles API keys and performs external posting.
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
### ScrapeCreators (reading Reddit)
1. Get an API key at [scrapecreators.com](https://scrapecreators.com)
2. Save it: `mkdir -p ~/.config/scrapecreators && echo "YOUR_KEY" > ~/.config/scrapecreators/api_key && chmod 600 ~/.config/scrapecreators/api_key`
### Late (posting to Reddit)
1. Get an API key at [getlate.dev](https://getlate.dev)
Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.
### ScrapeCreators (reading Reddit)
1. Get an API key at [scrapecreators.com](https://scrapecreators.com)
2. Save it: `mkdir -p ~/.config/scrapecreators && echo "YOUR_KEY" > ~/.config/scrapecreators/api_key && chmod 600 ~/.config/scrapecreators/api_key`
### Late (posting to Reddit)
1. Get an API key at [getlate.dev](https://getlate.dev)
The skill instructs users to persist API keys in ~/.config, creating durable credentials on disk for services that can read Reddit data and publish posts. Persistent secrets increase the blast radius of later compromise by other local processes, future skills, or accidental file exposure, especially because this skill also relies on file-read capability and external network actions.
### ScrapeCreators (reading Reddit)
1. Get an API key at [scrapecreators.com](https://scrapecreators.com)
2. Save it: `mkdir -p ~/.config/scrapecreators && echo "YOUR_KEY" > ~/.config/scrapecreators/api_key && chmod 600 ~/.config/scrapecreators/api_key`
### Late (posting to Reddit)
1. Get an API key at [getlate.dev](https://getlate.dev)
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Base URL: https://getlate.dev/api
This is focused on Reddit workflows: list accounts, validate subreddit, list subreddits/flairs, search/feed, and create posts.
"""
from __future__ import annotations
The create-post command performs a state-changing API call that can immediately publish Reddit content when --publish-now is supplied, but there is no confirmation prompt, dry-run mode, or explicit safety interlock before sending the POST request. In an agent skill context, this increases the risk of accidental or unauthorized posting if the tool is invoked with mistaken parameters, prompt-injected content, or user intent that was not properly confirmed.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
import urllib.request
from pathlib import Path
BASE_URL = "https://api.scrapecreators.com/v1"
def load_api_key() -> str:
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
return p.read_text(encoding="utf-8").strip()
raise SystemExit(
"Missing ScrapeCreators API key. Set SCRAPECREATORS_API_KEY or create ~/.config/scrapecreators/api_key"
)
The manifest describes ScrapeCreators reading capabilities as limited to search, subreddit details, and comments, plus Late-based writing for posts. This file additionally exposes ad-library search and ad lookup commands, which are distinct research capabilities not mentioned in the manifest description.
Searching Reddit's ad library and retrieving individual ads can support competitive intelligence, but that capability is not an obvious requirement of the manifest's stated purpose focused on subreddit research, comments, and post publishing. Because the manifest does not declare ad-analysis as part of the workflow, this is an unjustified extra capability relative to the stated intent.
No suspicious patterns detected.