reddit-automation Security Audit Report

🔭 Continuously monitored by ClawSecure Watchtower

Source:

SHA-256:

reddit-automation is an AI agent skill. ClawSecure audited reddit-automation across 2 files through the 3-Layer Audit Protocol covering all ten OWASP ASI Top 10 categories, assigning a security score of 78/100 (Medium Risk). The 6 findings concentrate in Policy Violation, Permissions Manifest and Obfuscation, including Only 60% of skill content could be analyzed. 1 of 2 files… and Binary file '__MACOSX/._SKILL.md' cannot be inspected by…. 1 was rated high or critical severity.

Is reddit-automation safe?

ClawSecure audited reddit-automation and assigned a security score of 78/100 (Medium Risk), identifying 6 findings across Policy Violation and Permissions Manifest. Review the findings below before installing.

What did ClawSecure find in reddit-automation?

ClawSecure identified 6 findings in reddit-automation, concentrated in Policy Violation, Permissions Manifest and Obfuscation. 1 was rated high or critical severity. The most severe include Only 60% of skill content could be analyzed. 1 of 2 files… and Binary file '__MACOSX/._SKILL.md' cannot be inspected by….

How was reddit-automation audited?

ClawSecure ran reddit-automation through its 3-Layer Audit Protocol with full OWASP ASI Top 10 coverage, scanning 2 files.

What does a score of 78 mean?

ClawSecure assigned reddit-automation a security score of 78/100, placing it in the Medium Risk range. This reflects 6 findings led by Policy Violation that warrant review before production use. ClawSecure derives this score with a weighted deduction model (critical -20, high -10, medium -5, low -2 from a base of 100).

Audit Findings for reddit-automation

ClawSecure detected 6 security findings in reddit-automation, spanning Policy Violation, Permissions Manifest and Obfuscation.

high · Only 60% of skill content could be analyzed. 1 of 2 files…. Policy Violation finding.
medium · Binary file '__MACOSX/._SKILL.md' cannot be inspected by…. Policy Violation finding detected in __MACOSX/._SKILL.md.
medium · Missing config.json - agent may not be properly configured. Permissions Manifest finding.
low · Hidden file found: __MACOSX/._SKILL.md. Hidden files may…. Obfuscation finding detected in __MACOSX/._SKILL.md.
info · Missing License Declaration. Policy Violation finding detected in SKILL.md.
info · Binary file found: __MACOSX/._SKILL.md. Binary files cannot…. Policy Violation finding detected in __MACOSX/._SKILL.md.

Each finding is expandable in the interactive list below.

3-Layer Audit Protocol

Security Recommendations for reddit-automation

Resolve policy violations

reddit-automation trips ClawSecure policy checks. Review each flagged pattern against your security policy and remediate or document an accepted exception before production use.

Add a config.json permissions manifest

A config.json file declares what an agent component can access: file system, network, shell execution and more. Without it, users have no visibility into what the component can do before installing. This is the single most impactful security improvement for any AI agent skill.

Review obfuscated or hidden code

reddit-automation contains obfuscated or hidden content that resists review. Inspect encoded, minified or hidden files to confirm they are not concealing unexpected behavior before installing.

Related Security Research

OWASP ASI Top 10 Explained: The Complete Guide to AI Agent Security Standards→Understanding Our 3-Layer Audit Protocol→

Related AI Agent Security Audits

pptxScore 93/100 cve-2026-42945-nginx-rewrite-analysisScore 85/100 user-story-splitterScore 70/100 user-story-splitterScore 70/100 md-to-docxScore 68/100

Scanned on April 13, 2026. reddit-automation is one of thousands of agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.

Start Your Free Scan