reddit-research
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill uses environment variables for the Crawlora API key and provides a bash helper script,
scripts/crawlora.sh, which usescurlwith proper argument quoting and URL-encoding to safely communicate with the official API endpoint atapi.crawlora.net. - [PROMPT_INJECTION]: The skill ingests untrusted Reddit content, which is a standard surface for indirect prompt injection. This is considered safe as the skill handles data through a vendor-controlled API and provides structured JSON output for analysis. Ingestion points: Reddit API responses; Boundary markers: None; Capability inventory: helper script execution; Sanitization: None for fetched content.
Audit Metadata