reddit-browse-and-post
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from Reddit threads, comments, and search results, which are untrusted external sources, creating a surface for indirect prompt injection.
- Ingestion points: Data is fetched from Reddit's public and authenticated JSON endpoints via
curl(SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or provide instructions to the agent to ignore potentially malicious directives embedded within the fetched Reddit content.
- Capability inventory: The skill has the capability to execute network requests (
curl) and publish posts, which could be misused if the agent obeys instructions found in external data. - Sanitization: No explicit sanitization or filtering of the Reddit content is described before the agent processes the data.
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the Reddit API and parse JSON data.
- Evidence: It utilizes
curlfor network requests and apython3one-liner to extract OAuth tokens from JSON responses (SKILL.md). - Context: These commands are used as intended for the skill's primary functionality and utilize environment variables for sensitive data, which is considered a standard and safe practice for secret management.
Audit Metadata