apify-reddit-scraper
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit, including posts, comments, and user bios. Ingestion points: Scraped results are fetched from Apify datasets as described in SKILL.md. Boundary markers: The instructions explicitly warn the agent to treat scraped content as untrusted data and ignore any instructions within it. Capability inventory: The skill uses the
apifyCLI for network operations and writes data to the local file system at/tmp/reddit.json. Sanitization: It instructs the agent to quote content as plain text and ignore embedded instructions.\n- [COMMAND_EXECUTION]: The skill executes shell commands using theapifyCLI (apify actors call,apify runs info,apify datasets get-items) to interact with the Apify platform and retrieve data.\n- [EXTERNAL_DOWNLOADS]: The skill fetches actor metadata and scraped results from the Apify platform via the CLI.
Audit Metadata