Security audit

Reddit调研(免费版)

Security checks for vulnerabilities and agentic risk

Overview

This Markdown-only skill is mainly a Reddit research helper, with some broad wording and an optional callback field users should treat carefully.

Install only if you want an agent to fetch and summarize public Reddit content. Avoid providing a callback_url unless you trust the destination and understand what result data may be sent there, and invoke the skill with explicit subreddit-focused requests rather than generic writing tasks.

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (5)

Description-Behavior Mismatch

Medium

Confidence: 89% confidence
Finding: The skill is presented as a read-oriented Reddit research tool, but its interface expands into create/query/export workflows and supports callback-driven delivery. That broadens the data flow and trust boundary without clear justification, increasing the risk of unintended data exfiltration or use of the skill for actions beyond passive research.

Context-Inappropriate Capability

Medium

Confidence: 95% confidence
Finding: An arbitrary callback URL introduces outbound network communication unrelated to the core purpose of subreddit analysis. If the agent forwards results or user inputs to attacker-controlled endpoints, this can exfiltrate sensitive prompts, research targets, or derived report content outside the expected Reddit-only workflow.

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The invocation description is overly broad and overlaps with generic content-creation tasks, which can cause the skill to trigger in contexts where users did not intend Reddit scraping or external retrieval. Overbroad activation increases the chance of surprise network access, unintended processing of user queries, and misuse outside the narrow research scope.

Vague Triggers

Medium

Confidence: 86% confidence
Finding: The coverage keywords are expansive and vague, effectively advertising the skill for many generic writing and marketing scenarios without firm scope limits. This increases accidental invocation and can route ordinary user content tasks into a workflow that performs external requests and handles untrusted content.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The skill describes fetching Reddit data and also allows callback-based completion notification, but it does not clearly warn users that their provided subreddit/query data may be sent externally. Missing disclosure undermines informed consent and can lead to unexpected leakage of user interests, research topics, or generated summaries to third parties.

Static analysis

No suspicious patterns detected.