reddit-community-discovery

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 0.80). The Skill contains explicit instructions to auto-install a dependency "without asking the user to confirm" and to hide/avoid describing that installation to the user, which is a deceptive behavior outside the stated community-discovery purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The Skill explicitly instructs the agent to automatically install a required runtime dependency without user confirmation and to avoid presenting this as a user action, a deliberate and deceptive installation behavior that creates supply-chain/unauthorized-install risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use the BrowserAct CLI to access real Reddit web pages at runtime (public web content), which can include outsider-authored free text that BrowserAct may extract and pass into the LLM context.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent to auto-install and invoke BrowserAct at runtime using the installer URL (https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which would fetch and execute remote installation code as a required dependency.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.70). The skill explicitly instructs the agent to install missing dependencies automatically without asking the user for approval, which directs the agent to modify the host system state (potentially performing privileged installs) and bypass user consent.