reddit-url-mentions
Pass
Audited by Gen Agent Trust Hub on May 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a bash script (
scripts/search_reddit_mentions.sh) which usescurlfor network connectivity andpython3for JSON payload construction and response validation. - [EXTERNAL_DOWNLOADS]: The skill connects to
ai-factory.frevana.comto fetch data regarding Reddit mentions. This is the primary function of the skill and is documented. - [DATA_EXFILTRATION]: User-provided URLs and task tags are sent to the
frevana.comAPI as part of the query. No sensitive local data or environmental secrets are exfiltrated. - [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection (Category 8) because it retrieves and summarizes untrusted external content from Reddit.
- Ingestion points: Data enters the agent's context through the Frevana API response, specifically in the
reddit_reviewsfields containing user-generated content. - Boundary markers: No boundary markers or special instructions are present in the skill to isolate or sanitize the external data from the agent's internal reasoning.
- Capability inventory: The skill environment provides the agent with shell command execution and filesystem access through the included automation script.
- Sanitization: The retrieved Reddit post titles and content are not sanitized before they are processed by the agent.
Audit Metadata