reddit-scraper
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python script (
scripts/search_reddit.py) that the agent is instructed to execute to perform scraping tasks. - [DATA_EXFILTRATION]: The Python script accesses the
GOOSEWORKS_API_KEYenvironment variable and transmits it to the vendor's API endpoint (app.gooseworks.ai) to authenticate requests to the Apify proxy. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from Reddit.
- Ingestion points: Untrusted Reddit post titles and body text are fetched in
scripts/search_reddit.pyand returned to the agent's context. - Boundary markers: The instructions do not define delimiters or provide 'ignore embedded instructions' warnings for the scraped content.
- Capability inventory: The skill executes subprocesses (Python script) and performs network operations via the Apify API.
- Sanitization: No sanitization, escaping, or validation is performed on the Reddit content before it is presented to the agent.
Audit Metadata