T08 · Insecure Dependencies
Warning
- Location
SKILL.md:4- Finding
Unpinned Third-Party npm Package Installed Globally
- Content
View full analysis
- Remediation
View remediation
Security audit
Reddit (Agent-First)
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent Reddit research CLI integration, but it asks users to globally install mutable third-party code and handle an API key in ways that deserve review before use.
Install only if you trust the ReddGrow npm package and publisher. Prefer using a securely managed REDDGROW_API_KEY environment secret over typing the key into a shell command, consider pinning or locally installing a reviewed CLI version, and keep the skill limited to Reddit research tasks.
Vulnerability Patterns
- Insecure DependenciesIntroduces malicious components through unsafe dependency sources
- Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
- Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
- Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
- Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Findings (1)
Vulnerability Patterns
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)
Missing User Warnings
High
- Category
- Not specified by scanner
- Confidence
- 97% confidence
- Finding
The skill instructs users to pass the API key directly on the command line via
reddgrow auth login rg_your_api_key_here. Command-line secrets can be exposed through shell history, process listings, terminal logs, CI logs, and agent telemetry, making credential theft significantly easier in multi-user or monitored environments.- Content
Vague Triggers
Medium
- Category
- Not specified by scanner
- Confidence
- 86% confidence
- Finding
The manifest description defines invocation scope with a wide list of everyday research activities such as 'marketing' and 'URL checking' without clear trigger boundaries or exclusion conditions. This can cause the skill to be selected for loosely related user requests where Reddit-specific CLI use is not actually intended.
- Content