reddit-launch-video

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). This skill explicitly instructs the agent to "WebFetch" public URLs (see SKILL.md step 1c) and references/brand-identity.md which direct the agent to extract hero text, CSS, screenshots and other page content from third‑party sites to build brand kits and drive subreddit/creative decisions, so untrusted web content is read and used to determine actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly fetches arbitrary web pages at runtime (e.g., via "WebFetch " / the example URL https://example.com/launch and commands like npx hyperframes capture <url>) and then extracts headlines, copy, and brand data that are injected into the agent's prompt/context to generate the script and brand-kit, so remote content directly controls the agent's output.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill includes explicit Reddit Ads API actions that create campaigns/ad groups and set spend amounts. Examples: reddit_ads__tool_create_campaign, reddit_ads__tool_create_ad_group (with goal_type='DAILY_SPEND' and goal_value=), reddit_ads__tool_create_post, and reddit_ads__tool_create_ad. The presence of a monetary field (micros) and the ability to create/modify campaign/ad-group budgets constitutes direct financial execution (managing ad spend), not a generic capability.