reddit-cli-hardened

Warn

Audited by Socket on Apr 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The purpose is coherent for a Reddit reader, but the trust model is not: the skill asks for high-value browser session cookies, persists them in shell startup files, and forwards them to an unverifiable `reddit-cli` binary with no documented install provenance. Data appears intended for Reddit, but the opaque executable and unsupported auth pattern make the skill high risk.

Confidence: 88%Severity: 86%
Audit Metadata
Analyzed At
Apr 21, 2026, 06:36 PM
Package URL
pkg:socket/skills-sh/faberlens%2Fhardened-skills%2Freddit-cli-hardened%2F@66132a6604d43ef26f3b5635e7d01e55e14f9974
Security Audit — socket — reddit-cli-hardened