Security audit

Agent Reach

Security checks across malware telemetry and agentic risk

Overview

Agent Reach is purpose-aligned for broad internet research, but it needs Review because it combines broad triggers with cookie-based account access, posting commands, anti-bot automation, and unpinned remote installation guidance.

Install only if you trust the upstream Agent Reach project and are comfortable giving an agent access to external web services and logged-in platform sessions. Inspect the remote install guide before running it, prefer safe or dry-run setup, use secondary accounts or isolated browser profiles, provide the minimum cookies needed, and require explicit approval before any post, comment, upload, proxy setup, scheduled task, or anti-bot automation.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access

Findings (4)

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: The skill explicitly recommends using a specialized tool to bypass WeChat anti-bot protections when reading articles. Even if framed as content access, embedding anti-bot evasion instructions expands the skill from normal browsing into circumvention behavior, which can violate platform controls and encourage unsafe automation patterns.

Vague Triggers

Medium

Confidence: 87% confidence
Finding: The trigger list includes broad phrases like general research and search requests, making accidental invocation likely in ordinary conversations. Over-broad activation increases the chance the agent will perform network access, external lookups, or platform interactions when the user did not intend to invoke this skill specifically.

Missing User Warnings

High

Confidence: 94% confidence
Finding: The skill tells users to import cookies for authenticated access without presenting clear warnings that cookies are sensitive credentials equivalent to session tokens. This creates a real risk of credential misuse, account takeover, privacy exposure, and unauthorized actions if the agent stores, mishandles, or reuses those cookies.

Missing User Warnings

High

Confidence: 97% confidence
Finding: Stating that the user only provides cookies while the agent does everything else downplays the consequences of handing over active session credentials and suggests broad delegated control. In this skill's context, that could enable authenticated reading, posting, or configuration actions on third-party accounts without sufficient transparency or guardrails.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.