kai-reddit-listen
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external Reddit RSS feeds or JSON imports, which can contain malicious instructions intended to influence the AI's scoring or draft generation.
- Ingestion points: As described in Phase 2, the skill collects
titleandbodycontent from Reddit posts and comments. - Boundary markers: The instructions do not specify the use of delimiters (e.g., XML tags or triple quotes) to isolate untrusted content, nor do they instruct the agent to ignore embedded commands within the source text.
- Capability inventory: The skill possesses the capability to write to external services (Google Sheets and Email adapters) in Phase 5 and can generate local previews and dashboard views in Phase 4.
- Sanitization: While the skill uses classification and integer-based scoring (1–10) to filter content, it does not explicitly require sanitization, escaping, or filtering of the raw Reddit text before it is used to generate content briefs or response drafts.
Audit Metadata