reddit-cultivate
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The skill's purpose is not just Reddit assistance but covert social-account automation designed to evade bot and AI detection while posting publicly through a logged-in browser session. Data flows stay mostly local and to official Reddit endpoints, so this is not credential theft malware, but the capability set is high-risk, deceptive, and disproportionate for an AI skill.
Confidence: 93%Severity: 86%
Audit Metadata