reddit

Warn

Audited by Socket on Apr 5, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The overall purpose is coherent for Reddit market research, and there is no clear credential theft or malicious exfiltration in the provided text. However, the skill’s main capability depends on an unverifiable `reddit.sh` executable with no documented source or release provenance, which makes the install/execution trust disproportionately weak for a skill intended to run recurring scans and process untrusted content.

Confidence: 87%Severity: 78%
Audit Metadata
Analyzed At
Apr 5, 2026, 02:35 PM
Package URL
pkg:socket/skills-sh/sky-flux%2Fskills%2Freddit%2F@66454e30e3ed4413cf39ac99ea147ae6e5171bac