reddit

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the reddit_get*/reddit_get_random/reddit_get_reddit_user_about/reddit_get_subreddit_rules actions, which retrieve public Reddit content (posts/comments/rules/profile text) authored by other users and then present it to the agent as readable text at runtime.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires running npx @useclawlink/cli (package page: https://www.npmjs.com/package/@useclawlink/cli and service https://claw-link.dev), which downloads and executes remote CLI code at runtime that directly controls agent actions (login, connect, run), so this is an external runtime dependency that executes remote code.