reddit-api
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to
reddit.fetcher.shto retrieve Reddit data. These operations are essential to the skill's functionality and target the vendor's official API domain. - [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted content from Reddit, creating a surface for potential indirect prompt injection attacks. Content such as posts or comments retrieved from the API could contain instructions intended to influence the agent.
- Ingestion points: Reddit posts, comments, and user profile data fetched from
reddit.fetcher.sh(SKILL.md). - Boundary markers: None defined within the instructions.
- Capability inventory: The skill enables data retrieval; the agent's actions are restricted by the platform's execution environment.
- Sanitization: No explicit content sanitization or filtering is specified in the skill documentation.
- [EXTERNAL_DOWNLOADS]: The skill references several external resources for documentation and configuration, including an OpenAPI contract (
openapi.json) and a catalog (llms.txt), all hosted on the vendor's domain. - [NO_CODE]: This skill consists of a documentation file (SKILL.md) and does not include any local executable scripts or binary files.
Audit Metadata