reddit-agent-marketing-department
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill utilizes environment variables for managing sensitive Reddit credentials (such as Client IDs and passwords), which is the industry standard for secure secret management.
- [SAFE]: Installation and resource fetching are conducted via well-known services (GitHub), following standard development workflows.
- [SAFE]: A robust human-in-the-loop security model is implemented, requiring explicit human approval for all posts, comments, and DMs. This prevents the agent from performing unauthorized public actions.
- [SAFE]: The skill includes built-in rate limiting and cooldown management logic to ensure compliance with platform terms of service and prevent accidental spamming.
- [PROMPT_INJECTION]: The skill processes untrusted external data fetched from the Reddit API, which presents a surface for indirect prompt injection. However, the mandatory manual review of all outbound content serves as a significant mitigation against these attacks.
- Ingestion points: Reddit JSON API data ingested via scripts in
skills/reddit/scripts/. - Boundary markers: Described conceptually as "safety gates" and "operating rules" within the workflow documentation.
- Capability inventory: Network operations (Reddit API calls) and local logging of outcomes.
- Sanitization: Includes an output-focused "Anti-AI-Slop" filter to remove typical AI vocabulary patterns before human review.
Audit Metadata