reddit-search

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.90). Most URLs are benign (Reddit, example.com, localhost), but the raw.githubusercontent.com link pulls and executes a shell script from an external GitHub repo (a remote .sh installer), which is effectively running untrusted code and is a high-risk delivery vector unless you fully trust and audit that repository and script.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The runtime path uses frevana_scrape to fetch and scrape outsider-authored public web content from https://www.reddit.com/search.json?... (Reddit’s response body is then parsed as JSON and printed into the agent context), which is indirect prompt injection exposure.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The bundled scripts/setup.sh fetches and execs remote code at runtime from https://raw.githubusercontent.com/FinpeakInc/frevana-cli-releases/refs/heads/main/skills/frevana/scripts/setup.sh using curl and exec bash, so the skill downloads and executes external code required for operation.