reddit-archive
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external command-line tools to perform its functions. Specifically,
rdtx.mjscallsyt-dlpfor video downloading and potentiallyffmpegfor media merging. It also invokesagent-browserto interact with the Chrome instance over CDP.\n- [DYNAMIC_EXECUTION]: The skill uses dynamic JavaScript execution within the context of the browser.rdtx.mjsand related scripts utilizeagent-browser evaland CDP'sRuntime.evaluateto perform actions like fetching data from Reddit's internal APIs, handling login states, and interacting with the page DOM. These operations are performed using locally defined script templates.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by downloading and archiving Reddit posts and comments. While it summarizes the voice of a community and extracts metadata, it does not treat the content as instructions for the agent. This ingestion of external content is a fundamental part of the skill's archival purpose.\n- [EXTERNAL_DOWNLOADS]: The skill downloads media and metadata from Reddit's official domains (i.redd.it,preview.redd.it,v.redd.it) and usesyt-dlpto handle complex DASH streams. These are standard operations for a media archival tool targeting well-known services.
Audit Metadata