get-reddit
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs an automated installation of the 'playwright' Node.js package and the Chromium browser binary during its initial execution using 'npm' and 'npx'. These resources are fetched from official and well-known software registries.
- [REMOTE_CODE_EXECUTION]: The setup process involves 'npm install' and 'npx playwright install chromium', which downloads and executes setup code. These are standard procedures for the tools used and target well-known registries.
- [PROMPT_INJECTION]: The skill processes untrusted data from external Reddit threads, creating a surface for indirect prompt injection. 1. Ingestion points: Reads content from Reddit URLs via Playwright. 2. Boundary markers: The instructions lack explicit delimiters or warnings to ignore embedded instructions in the fetched content. 3. Capability inventory: The agent can execute shell scripts and write to the '/tmp/' directory. 4. Sanitization: The 'get-reddit.mjs' script validates the Reddit post ID with a strict regular expression, but the fetched content is not sanitized before summarization.
- [COMMAND_EXECUTION]: The skill utilizes a shell script launcher ('get-reddit.sh') to manage the environment and execute the main Node.js logic.
Audit Metadata