reddit

Warn

Audited by Socket on Sep 16, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill is coherent as a Reddit automation skill, and the npm install path appears to be the upstream documented distribution for CamoFox rather than a fake payload. However, its core function is anti-detection browser automation for authenticated Reddit posting and voting, enabling autonomous public actions and evasion of platform controls; this makes it high-risk even without confirmed malware or credential exfiltration.

Confidence: 88%Severity: 74%
Audit Metadata
Analyzed At
Sep 16, 2026, 08:12 PM
Package URL
pkg:socket/skills-sh/redf0x1%2Fcamofox-browser%2Freddit%2F@bd80bf4fb8f77fe55f601452e1b32771c15dea986f038715e40fdc4cad63aa6f
Security Audit — socket — reddit