reddit-research

Pass

Audited by Gen Agent Trust Hub on Aug 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues were detected. The skill uses environment variables for the Crawlora API key and provides a bash helper script, scripts/crawlora.sh, which uses curl with proper argument quoting and URL-encoding to safely communicate with the official API endpoint at api.crawlora.net.
  • [PROMPT_INJECTION]: The skill ingests untrusted Reddit content, which is a standard surface for indirect prompt injection. This is considered safe as the skill handles data through a vendor-controlled API and provides structured JSON output for analysis. Ingestion points: Reddit API responses; Boundary markers: None; Capability inventory: helper script execution; Sanitization: None for fetched content.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 10, 2026, 06:53 PM
Security Audit — agent-trust-hub — reddit-research