reddit-archive

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external command-line tools to perform its functions. Specifically, rdtx.mjs calls yt-dlp for video downloading and potentially ffmpeg for media merging. It also invokes agent-browser to interact with the Chrome instance over CDP.\n- [DYNAMIC_EXECUTION]: The skill uses dynamic JavaScript execution within the context of the browser. rdtx.mjs and related scripts utilize agent-browser eval and CDP's Runtime.evaluate to perform actions like fetching data from Reddit's internal APIs, handling login states, and interacting with the page DOM. These operations are performed using locally defined script templates.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by downloading and archiving Reddit posts and comments. While it summarizes the voice of a community and extracts metadata, it does not treat the content as instructions for the agent. This ingestion of external content is a fundamental part of the skill's archival purpose.\n- [EXTERNAL_DOWNLOADS]: The skill downloads media and metadata from Reddit's official domains (i.redd.it, preview.redd.it, v.redd.it) and uses yt-dlp to handle complex DASH streams. These are standard operations for a media archival tool targeting well-known services.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 03:50 AM