search-reddit
Verdict safe, but 2 findings (2 medium), mainly data exfiltration. Most recent scan 2026-02-07.
MODERATE RISK - This Reddit search skill has several security concerns primarily related to data handling and external API integration. The skill sends user queries to OpenAI's external API, creating a data exfiltration pathway that may not be obvious to users. API key management relies on environment variables and configuration commands without strong security guidance. The missing script files (search.js, the.py) prevent verification of actual execution behavior, creating uncertainty about tool usage and potential for tool shadowing. However, no critical threats like command injection, credential theft, or prompt injection were detected in the provided documentation. The skill appears to be a legitimate Reddit search integration, but requires better security documentation, complete file distribution, and user disclosure about external data transmission.
Scanner's overall assessment (LLM analyzer)
Second scanner: NVIDIA SkillSpector
Independent static run, no language model, over the same files as the Cisco scan above. How the two scanners compare across the whole corpus: Two scanners, one corpus.
What this skill does
Search Reddit in real time using OpenAI web_search with enrichment (engagement + top comments). Use when you need recent Reddit threads, subreddit-filtered results, or quick link lists.
- Package
- 4 files, 21 KB
- SKILL.md
- 248 words, 10 sections
- Code
- JavaScript (1)
SKILL.md covers: Search Reddit · Setup · Commands · Basic Search · Filter by Time · Filter by Subreddit · Output Options · Example Usage in Chat · How It Works · Environment Variables
Findings
MEDIUM Hardcoded API Key Exposure Risk in Documentation Data Exfiltrationllm
The skill documentation instructs users to set OpenAI API keys via command-line configuration and environment variables. While this is standard practice, the examples show plaintext API key handling without warnings about secure storage, rotation, or access control. The skill also references a shared key configuration pattern that could lead to key reuse across multiple skills, increasing blast radius if compromised.
SKILL.md
```bash
clawdbot config set skills.entries.search-reddit.apiKey "sk-YOUR-KEY"
export OPENAI_API_KEY="sk-YOUR-KEY"
clawdbot config set skills.entries.openai.apiKey "sk-YOUR-KEY"
```MEDIUM External API Data Exfiltration via OpenAI Responses API Data Exfiltrationllm
The skill sends user search queries and Reddit content to OpenAI's external API endpoint (/v1/responses) with web_search tool enabled. This creates a data flow where user queries, Reddit thread content, and potentially sensitive discussion topics are transmitted to a third-party service. While OpenAI is a legitimate service, this represents data exfiltration from the local environment to an external endpoint, and users may not be aware their search queries are being sent externally.
SKILL.md
Uses OpenAI Responses API (`/v1/responses`) with the `web_search` tool:
- Allowed domain: `reddit.com`
- Enriches each thread by fetching Reddit JSON (`/r/.../comments/.../.json`)What is in the package
| File | Kind | Size |
|---|---|---|
README.md | doc | 2.1 KB |
SKILL.md | doc | 2.1 KB |
package.json | config | 387 B |
scripts/search.js | script | 16 KB |
External hosts referenced
www.reddit.com platform.openai.com docs.clawd.bot github.com
Hostnames that appear in the skill's files. Referencing a host is not a finding; compare against the findings above and the skill's stated purpose.
Environment variables referenced
OPENAI_API_KEY SEARCH_REDDIT_MODEL DEFAULT_MODEL
Package contents recorded 2026-10-22. The scan above ran against the version current at scan time; the two can differ if the skill has since been updated.
What we checked
- Static analyzer. Pattern rules over SKILL.md and bundled files: known-bad commands, exfiltration URLs, secrets, obfuscation.
- Llm analyzer. A language model reads the skill and reports intent-level issues the rules cannot express.
- Meta analyzer. A second model pass that validates, deduplicates and re-scores the other analyzers' findings.
What we did not check
- Runtime behaviour. The skill was not executed; findings come from reading its files.
- Anything fetched at install or run time, including remote scripts, package dependencies, and URLs the skill tells the agent to open.
- Content the analyzers cannot read: images, binaries, and some non-English text.
- Known scanner bypass classes. See the methodology and limitations page.
Sources
- Repository: https://clawhub.ai/skills/search-reddit
- Raw scan result: search-reddit-scan.json
- Badge for your README:
- Request a re-scan