reddit-insights
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the reddit-insights-mcp package from the well-known NPM registry during initialization using npx.
- [COMMAND_EXECUTION]: The installation process involves executing npx to download and run the MCP server logic on the local machine.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Reddit posts, which is an inherent part of its search functionality.
- Ingestion points: The reddit_search tool in SKILL.md retrieves post titles, content, and metadata from the Reddit API.
- Boundary markers: The instructions do not define specific delimiters to separate external Reddit content from the agent's system instructions.
- Capability inventory: The skill's capabilities are restricted to searching, listing subreddits, and viewing trending topics; it lacks tools for modifying the local file system or executing arbitrary network requests.
- Sanitization: No explicit content sanitization or instruction-filtering for Reddit data is implemented in the provided prompts.
Audit Metadata