reddit-cli-hardened
Warn
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions guide the agent to modify the user's shell configuration (~/.bashrc) to persist authentication credentials. Modifying shell profiles is a sensitive operation that can be used for persistence or to alter environment behavior.
- [PROMPT_INJECTION]: The skill fetches and displays untrusted data (Reddit posts, titles, and text) without sanitization or boundary markers. This exposes the agent to indirect prompt injection vulnerabilities:
- Ingestion points: Data enters the context through the Reddit API via the
scripts/reddit-cli.jsscript. - Boundary markers: No delimiters or instructions are used to separate Reddit content from agent instructions in the output.
- Capability inventory: The agent is explicitly granted the capability to modify shell configuration files (~/.bashrc) as part of the setup process.
- Sanitization: There is no sanitization or filtering of the fetched content beyond basic length truncation.
- Ingestion points: Data enters the context through the Reddit API via the
- [EXTERNAL_DOWNLOADS]: The documentation suggests downloading the implementation script directly from an external GitHub repository (github.com/kelsia14/reddit-cli).
- [DATA_EXPOSURE]: The skill facilitates the handling of sensitive Reddit session cookies. While the implementation references environment variables at runtime, the documentation's instructions to store these values in plain text within ~/.bashrc increases the risk of local credential exposure.
Audit Metadata