reddit-voice
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node:child_processto execute external CLI tools. - It calls
agent-browserto interface with a running Chrome instance via the Chrome DevTools Protocol (CDP). - It calls
yt-dlpto download and merge video content from Reddit in thecmdArchivefunction. - It manages a local state directory at
~/.rdtxto store an audit log of all write operations performed by the tool. - [DYNAMIC_EXECUTION]: The skill implements a bridge between Node.js and the browser environment by dynamically constructing and evaluating JavaScript code.
- Functions like
evalInPageinscripts/rdtx.mjswrap JavaScript snippets in an asynchronous execution block and send them to the browser via CDP. - This mechanism is used to perform same-origin
fetchrequests inside the browser session, utilizing the user's existing authentication and CSRF tokens for Reddit operations. - [INDIRECT_PROMPT_INJECTION]: The skill acts as a data ingestion surface by reading untrusted content from Reddit.
- Ingestion points: Functions
cmdVoice,cmdRead,cmdScout, andcmdInboxinscripts/rdtx.mjsfetch titles, body text, and comments from Reddit APIs. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the data when it is passed to the agent for tone analysis.
- Capability inventory: The skill has the ability to execute shell commands (via
agent-browserandyt-dlp) and perform authenticated writes to Reddit (cmdSubmit,cmdComment). - Sanitization: The skill performs string slicing (e.g.,
.slice(0, 1400)) but does not explicitly sanitize or escape the content for LLM safety tokens.
Audit Metadata