bggg-data-reddit
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a standard surface for Indirect Prompt Injection (Category 8) because it ingests and processes untrusted user-generated content from Reddit. While the risk is inherent to its primary purpose as a data collection tool, the following evidence chain exists:
- Ingestion points:
scripts/normalize_reddit.pyreads JSON files containing arbitrary text from Reddit posts and comments stored in thedata/raw/source_json/directory. - Boundary markers: The skill does not implement specific delimiters or "ignore embedded instructions" warnings within the resulting JSONL data file to differentiate user content from other data fields.
- Capability inventory: The
scripts/normalize_reddit.pyscript has the capability to read from and write to the local file system to perform data normalization. - Sanitization: The script performs basic whitespace compaction but does not include safety filtering or sanitization aimed at neutralizing potential malicious instructions embedded within the Reddit text content.
Audit Metadata