Security audit · Reddit

Security audit

Security checks across malware telemetry and agentic risk

Overview

This Reddit skill does what it says, but it gives an agent live posting and moderation power while persisting reusable Reddit tokens with limited safety guidance.

Review before installing. Use a dedicated low-privilege Reddit app/account, grant only scopes you actually need, avoid putting Reddit passwords in environment variables, protect or delete ~/.reddit-token.json when not needed, and require explicit human approval before submit, reply, remove, approve, sticky, lock, or unlock commands.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (4)

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The README instructs users to place Reddit client credentials and the Reddit username/password into environment variables, but it provides no warning that these are sensitive secrets that can be exposed through shell history, process inspection, crash reports, CI logs, or inherited environments. In a skill designed for agent automation and posting/moderation, exposed credentials could allow account takeover or unauthorized actions on Reddit, including posting and moderation abuse.

Missing User Warnings

Medium

Confidence: 91% confidence
Finding: The README states that an OAuth token is stored in ~/.reddit-token.json but does not warn users that this file contains reusable authentication material that must be protected. In the context of a Reddit automation/moderation skill, compromise of that token file could enable unauthorized posting, reading, or moderation actions until revoked or expired.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The skill explicitly states that an OAuth token is stored at `~/.reddit-token.json` and auto-refreshes, but it does not warn users about local credential persistence, file sensitivity, or expected file permissions. Persisted tokens can allow continued authenticated Reddit access if the host is shared, compromised, or backed up insecurely.

Missing User Warnings

Medium

Confidence: 90% confidence
Finding: The skill stores OAuth access and refresh tokens in ~/.reddit-token.json without setting restrictive file permissions or clearly warning the user that long-lived credentials will be persisted locally. On multi-user systems or in permissive environments, another local process or user could read the refresh token and gain ongoing access to the Reddit account.

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.exposed_secret_literal (+1 more)

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/reddit.mjs:252

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/reddit.mjs:26

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: scripts/reddit.mjs:30

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: scripts/reddit.mjs:37