Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Bash to execute its internal Python helper script. The implementation includes a path resolution strategy that searches for the script within a restricted directory structure in the temporary filesystem if the primary path is not available.
- [DATA_EXFILTRATION]: The skill manages sensitive Reddit authentication data (cookies and tokens). It includes a custom HTTP redirect handler to prevent these credentials from being forwarded to third-party domains. Furthermore, the script explicitly sanitizes error messages and response bodies to prevent the accidental leakage of reflected secrets in logs or output.
- [PROMPT_INJECTION]: By reading content from Reddit, the skill introduces a surface for indirect prompt injection. This is mitigated through structured data handling: the script parses raw API responses and extracts only relevant fields into a clean JSON object before passing the information to the agent context.
Audit Metadata