reddit-search-api

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required workflow searches and reads Reddit posts, comments, feeds, and user profiles, which allow untrusted third parties to inject free text consumed by the agent.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill utilizes an ordinary third-party API hosted on an external domain (scavio.dev and api.scavio.dev) without an official enterprise provenance or signature, constituting a common unofficial operational dependency.