Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted user-generated content from Reddit, establishing a potential surface for indirect instructions through post content and messages.\n- Ingestion points: The agent reads from various old.reddit.com URLs, including the inbox, search results, and thread comments (SKILL.md).\n- Boundary markers: There are no specific delimiters defined to separate user data from agent instructions.\n- Capability inventory: The agent uses page-level browser tools capable of navigation and form interaction (SKILL.md).\n- Sanitization: The instructions do not define sanitization or filtering procedures for the ingested data.\n- [SAFE]: The skill implements robust defensive instructions by explicitly forbidding the exfiltration of cookies, tokens, or profile files and prohibiting the use of debuggers or unauthorized HTTP clients to hijack the session.
Audit Metadata