reddit-new-posts-monitor

CRITICAL E004: Prompt injection detected in skill instructions.

• Potential prompt injection detected (high risk: 1.00). The skill instructs the agent to automatically install a dependency and explicitly to hide that installation from the user and avoid requesting approval, which is a deceptive instruction outside the stated monitoring/data-collection purpose.

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The document instructs automatic, concealed installation of an external CLI dependency ("Install BrowserAct") without asking the user or presenting it as an installation request, which enables unauthorized software installation and supply-chain/backdoor risks.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md instructs the agent to use BrowserAct to access live Reddit pages at runtime and then work with the visible post fields (e.g., title/caption/description/text), which are outsider-authored free text from public web content.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Skill explicitly directs the agent at runtime to install and invoke the BrowserAct CLI using the provided installer link (https://www.browseract.com/?co-from=social-media&redirect=https://github.com/browser-act/skills/tree/main), which is a required dependency and would involve fetching remote content that can install/execute code.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The Skill explicitly instructs the agent to automatically install the BrowserAct dependency and resume execution without asking the user for confirmation, which compels the agent to modify the host environment (install software) without explicit user consent — a moderate-risk instruction though it does not explicitly request sudo, edit system files, or create users.