reddit-post

Fail

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: HIGHCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses osascript to programmatically control the Google Chrome application on macOS. It uses this to execute arbitrary shell commands that interact with the system's GUI and application processes.
  • [DYNAMIC_EXECUTION]: The skill generates and injects JavaScript code strings directly into the browser's active tab via osascript. This allows the agent to execute code within the security context of the user's logged-in session on Reddit.
  • [DATA_EXFILTRATION]: The skill harvests sensitive CSRF tokens (modhash) by querying Reddit's internal /api/me.json endpoint. It exfiltrates this data from the browser's memory back to the agent by temporarily overwriting the document.title (window title), which the agent then reads via AppleScript.
  • [SESSION_HIJACKING]: By using the browser's credentials: "include" fetch option, the skill performs authenticated actions (like posting and setting flair) using the user's existing login cookies without requiring an official API token or OAuth authorization.
  • [DETECTION_EVASION]: The skill explicitly includes logic and instructions designed to bypass Reddit's bot detection and automated spam filters, such as staggering posts across days and avoiding specific keywords that trigger security flags.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 2, 2026, 05:30 AM