reddit-cultivate

Warn

Audited by Socket on Mar 29, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill's purpose is not just Reddit assistance but covert social-account automation designed to evade bot and AI detection while posting publicly through a logged-in browser session. Data flows stay mostly local and to official Reddit endpoints, so this is not credential theft malware, but the capability set is high-risk, deceptive, and disproportionate for an AI skill.

Confidence: 93%Severity: 86%
Audit Metadata
Analyzed At
Mar 29, 2026, 09:45 AM
Package URL
pkg:socket/skills-sh/PHY041%2Fclaude-agent-skills%2Freddit-cultivate%2F@243651373757ceebd9f4a0852064758da480b6e2