reddit-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md describes an MCP/HTTP workflow that can fetch Reddit content from endpoints like /api/search/post, /api/post/{id}/comments, and /api/posts/hot based on outsider-controlled search terms (e.g., keyword) and can ingest full post/comment trees at runtime, enabling indirect prompt-injection via arbitrary Reddit text.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill explicitly exposes paid endpoints and payment flows: it documents topping up credits via POST /api/credits/topup, a "topup_credits" MCP operation, and an x402 pay-per-call flow that requires/signs USDC transactions on specific blockchains (Base, Polygon, Arbitrum, Monad, Solana). Those are specific crypto payment/execution capabilities (signing/sending on-chain payments), so this skill grants direct financial execution authority.