reddit-automation

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required runtime workflow uses Composio’s Reddit search/retrieval tools (e.g., REDDIT_SEARCH_ACROSS_SUBREDDITS, REDDIT_GET_R_TOP, REDDIT_RETRIEVE_POST_COMMENTS) which fetch and return outsider-authored Reddit post/comment text into the agent context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill requires contacting the external MCP endpoint https://rube.app/mcp at runtime (via RUBE_SEARCH_TOOLS) to fetch tool schemas that directly determine available tools/instructions, so this remote content can control the agent's prompts/behavior.