reddit-search

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to the Arctic Shift archive API at https://arctic-shift.photon-reddit.com. The helper script scripts/reddit_archive.py uses this service to fetch Reddit posts and comments because Reddit blocks direct access from AI agents. This is the primary functionality of the skill.
  • [COMMAND_EXECUTION]: The skill provides examples of running a local Python script scripts/reddit_archive.py. These commands are standard for tool usage and do not involve shell injection or dangerous system-level changes.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from Reddit, which is untrusted content. The SKILL.md explicitly warns the agent to ignore instructions inside posts and comments. The capability to write data is limited to creating Markdown files in a temporary directory for reading, minimizing the risk of multi-step exploitation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 12:10 PM