reddit-poster
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on shell command execution via the
uvtool to drive thereddit-postCLI for all operations, including flair resolution, subreddit searching, and post submission. - [INDIRECT_PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it is designed to ingest and analyze untrusted external content from Reddit.
- Ingestion points: The agent is instructed to read external post titles, bodies, and comments from Reddit in Step 1b and the replies section to guide its drafting and response register.
- Boundary markers: The instructions do not define specific delimiters or instructions to isolate ingested Reddit content from the agent's core instructions; however, the workflow includes a mandatory human-in-the-loop step requiring explicit user approval before any external action is finalized.
- Capability inventory: The skill possesses capabilities for network operations (Reddit API interactions via the CLI) and file system access (reading body files for posts).
- Sanitization: There are no explicit instructions or logic provided for sanitizing, escaping, or validating the external content retrieved from Reddit before it is processed by the agent.
Audit Metadata