skills/fortunto2/solo-factory/solo-reddit/Socket

solo-reddit

Warn

Audited by Socket on Oct 9, 2026

1 alert found:

Security

Securityscripts/search-posts.sh

MEDIUM

SecurityMEDIUM

scripts/search-posts.sh

The script has a clear command-injection vulnerability: a malicious SUBREDDIT argument can inject and execute Python code because it is interpolated unescaped into python3 -c source. The network request otherwise targets Reddit, and response fields are printed rather than evaluated. Treat arguments as untrusted and pass data to Python separately or safely encode it.

Confidence: 99%Severity: 82%

Audit Metadata

Analyzed At

Oct 9, 2026, 11:42 AM

Package URL

pkg:socket/skills-sh/fortunto2%2Fsolo-factory%2Fsolo-reddit%2F@ef2d9003c7a36a41bcaab059b3acdb5dcb4e9b9ddc9dfdc6dfa0ab49a01e3c30