reddit-search
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the Arctic Shift archive API at
https://arctic-shift.photon-reddit.com. The helper scriptscripts/reddit_archive.pyuses this service to fetch Reddit posts and comments because Reddit blocks direct access from AI agents. This is the primary functionality of the skill. - [COMMAND_EXECUTION]: The skill provides examples of running a local Python script
scripts/reddit_archive.py. These commands are standard for tool usage and do not involve shell injection or dangerous system-level changes. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from Reddit, which is untrusted content. The
SKILL.mdexplicitly warns the agent to ignore instructions inside posts and comments. The capability to write data is limited to creating Markdown files in a temporary directory for reading, minimizing the risk of multi-step exploitation.
Audit Metadata