reddit-api

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [DATA_EXFILTRATION]: The skill performs network requests to reddit.fetcher.sh to retrieve Reddit data. These operations are essential to the skill's functionality and target the vendor's official API domain.
  • [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted content from Reddit, creating a surface for potential indirect prompt injection attacks. Content such as posts or comments retrieved from the API could contain instructions intended to influence the agent.
  • Ingestion points: Reddit posts, comments, and user profile data fetched from reddit.fetcher.sh (SKILL.md).
  • Boundary markers: None defined within the instructions.
  • Capability inventory: The skill enables data retrieval; the agent's actions are restricted by the platform's execution environment.
  • Sanitization: No explicit content sanitization or filtering is specified in the skill documentation.
  • [EXTERNAL_DOWNLOADS]: The skill references several external resources for documentation and configuration, including an OpenAPI contract (openapi.json) and a catalog (llms.txt), all hosted on the vendor's domain.
  • [NO_CODE]: This skill consists of a documentation file (SKILL.md) and does not include any local executable scripts or binary files.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 07:22 PM
Security Audit — agent-trust-hub — reddit-api