reddit-archive

Overall, this module is a powerful Reddit automation CLI that uses CDP to execute code inside a real browser and can export/use authenticated cookies. While there is no clear sign of classic malware (no reverse shell/crypto-mining/exfiltration), there are meaningful security risks: (1) CDP execFile uses a configurable helper binary from environment, (2) evalInPage performs dynamic CDP eval and some eval payloads embed CLI-controlled values, creating an injection surface in the page context, and (3) it exports and stores cookie values locally (sensitive credential handling). Treat as high-privilege automation and review/lock down input sources and environment configuration.