reddit-url-mentions

Pass

Audited by Gen Agent Trust Hub on May 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a bash script (scripts/search_reddit_mentions.sh) which uses curl for network connectivity and python3 for JSON payload construction and response validation.
  • [EXTERNAL_DOWNLOADS]: The skill connects to ai-factory.frevana.com to fetch data regarding Reddit mentions. This is the primary function of the skill and is documented.
  • [DATA_EXFILTRATION]: User-provided URLs and task tags are sent to the frevana.com API as part of the query. No sensitive local data or environmental secrets are exfiltrated.
  • [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection (Category 8) because it retrieves and summarizes untrusted external content from Reddit.
  • Ingestion points: Data enters the agent's context through the Frevana API response, specifically in the reddit_reviews fields containing user-generated content.
  • Boundary markers: No boundary markers or special instructions are present in the skill to isolate or sanitize the external data from the agent's internal reasoning.
  • Capability inventory: The skill environment provides the agent with shell command execution and filesystem access through the included automation script.
  • Sanitization: The retrieved Reddit post titles and content are not sanitized before they are processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
May 29, 2026, 11:43 AM
Security Audit — agent-trust-hub — reddit-url-mentions