reddit-research

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to ask the user for an API key and then embed it directly into Python or TypeScript code (client = XpozClient("THE_KEY_FROM_USER"), apiKey: "THE_KEY_FROM_USER") or export it as a shell environment variable (export XPOZ_API_KEY=THE_KEY_FROM_USER), causing the secret value to pass through the LLM's context and output.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow searches and ingests Reddit discussions via Xpoz APIs, exposing the agent to outsider-authored post titles, text, and comments.