agency-reddit-community-builder
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to monitor brand mentions and participate in subreddit discussions. This creates a potential surface for indirect prompt injection if the agent processes untrusted user-generated content from Reddit without proper input validation or delimiters.
- Ingestion points: Phase 1 (Subreddit Analysis) and Phase 3 (Reputation Monitoring) require the agent to read external Reddit content.
- Boundary markers: None specified in the instructions.
- Capability inventory: The skill is instructional and does not define specific tools, though it implies the use of Reddit API or scraping tools by the host agent.
- Sanitization: No mention of sanitizing or escaping external content before processing.
- [NO_CODE]: The skill consists entirely of natural language instructions and markdown documentation. It does not include any executable scripts, configuration files, or external package dependencies.
Audit Metadata