reddit-poster

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on shell command execution via the uv tool to drive the reddit-post CLI for all operations, including flair resolution, subreddit searching, and post submission.
  • [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is designed to ingest and analyze untrusted external content from Reddit.
  • Ingestion points: The agent is instructed to read external post titles, bodies, and comments from Reddit in Step 1b and the replies section to guide its drafting and response register.
  • Boundary markers: The instructions do not define specific delimiters or instructions to isolate ingested Reddit content from the agent's core instructions; however, the workflow includes a mandatory human-in-the-loop step requiring explicit user approval before any external action is finalized.
  • Capability inventory: The skill possesses capabilities for network operations (Reddit API interactions via the CLI) and file system access (reading body files for posts).
  • Sanitization: There are no explicit instructions or logic provided for sanitizing, escaping, or validating the external content retrieved from Reddit before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 09:56 PM