reddit-voice

Pass

Audited by Gen Agent Trust Hub on Aug 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses node:child_process to execute external CLI tools.
  • It calls agent-browser to interface with a running Chrome instance via the Chrome DevTools Protocol (CDP).
  • It calls yt-dlp to download and merge video content from Reddit in the cmdArchive function.
  • It manages a local state directory at ~/.rdtx to store an audit log of all write operations performed by the tool.
  • [DYNAMIC_EXECUTION]: The skill implements a bridge between Node.js and the browser environment by dynamically constructing and evaluating JavaScript code.
  • Functions like evalInPage in scripts/rdtx.mjs wrap JavaScript snippets in an asynchronous execution block and send them to the browser via CDP.
  • This mechanism is used to perform same-origin fetch requests inside the browser session, utilizing the user's existing authentication and CSRF tokens for Reddit operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a data ingestion surface by reading untrusted content from Reddit.
  • Ingestion points: Functions cmdVoice, cmdRead, cmdScout, and cmdInbox in scripts/rdtx.mjs fetch titles, body text, and comments from Reddit APIs.
  • Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for the data when it is passed to the agent for tone analysis.
  • Capability inventory: The skill has the ability to execute shell commands (via agent-browser and yt-dlp) and perform authenticated writes to Reddit (cmdSubmit, cmdComment).
  • Sanitization: The skill performs string slicing (e.g., .slice(0, 1400)) but does not explicitly sanitize or escape the content for LLM safety tokens.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 20, 2026, 07:23 PM