reddit-ads
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements an 'Agentic Optimizer' that fetches data from an external source (Reddit Ads API) and incorporates it into a prompt for an LLM to make automated decisions (pausing ads, scaling budgets).
- Ingestion points: The
fetchPerformanceDatamethod inservices/reddit-ads-optimizer.ts(and its Python equivalent) retrieves performance reports viaclient.getReport(). - Boundary markers: The prompt uses structured headers (e.g.,
## Performance Data) but lacks explicit instructions for the model to ignore potential natural language commands embedded within data fields like campaign or ad names. - Capability inventory: The service has the ability to modify the advertising account state via
updateAdandupdateAdGroupcalls, which can pause ads or change budget amounts. - Sanitization: The data is stringified into JSON before prompt interpolation; however, there is no validation or filtering to ensure that descriptive fields (which could be controlled by an external actor with access to the Reddit account) do not contain malicious instructions.
Audit Metadata