reddit-post

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). This code intentionally evades automation detection by attaching to a human-launched browser and executing arbitrary JS inside the logged-in page (using the user's live cookies/modhash), and it also reads and exports session cookies to disk — behaviors that enable powerful, deliberate account-capable actions and could be abused to post or act on a user's behalf without explicit runtime consent.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/rdtx.mjs, the rdtx read/archive/inbox commands navigate to a user-provided Reddit permalink, then execute evalInPage(...) which uses same-origin fetch (__rf) to retrieve and parse the resulting JSON (including post/comment/message bodies) into LLM-visible JSON.