reddit-post-writer
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple sources to generate content, creating an attack surface for indirect prompt injection.\n
- Ingestion points: Processes external information retrieved via the
web_searchtool (subreddit rules, product reviews) and user-supplied strings (product descriptions, trigger questions) as defined in theInput SchemaandWorkflowofSKILL.md.\n - Boundary markers: The skill lacks explicit delimiters or instructions to ignore potential commands embedded within the external search results or user inputs during the prompt interpolation phase.\n
- Capability inventory: Utilizes the
web_searchtool and generates formatted text output intended for publication on social media platforms.\n - Sanitization: No formal sanitization, escaping, or validation of the fetched external content is described before it is processed by the AI to form the final Reddit post body.
Audit Metadata