reddit-marketing-agent
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The installation instructions direct the user to clone a repository from
github.com/lucaswalter/reddit-marketing-agent.git, which is an external source not identified as a trusted vendor. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of Reddit thread data.
- Ingestion points: The skill fetches thread titles and content from subreddits via the PRAW library in
SKILL.md. - Boundary markers: External thread content is interpolated directly into the
generate_responseprompt without using delimiters or instructions to ignore embedded commands. - Capability inventory: The agent uses the OpenAI API to process the data and generate responses, which could be manipulated by malicious content within a Reddit thread.
- Sanitization: No sanitization or filtering is performed on the Reddit thread content before it is sent to the LLM.
Audit Metadata