reddit-search
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats or malicious patterns were detected during the analysis.
- [EXTERNAL_DOWNLOADS]: The script performs GET requests to https://www.reddit.com to retrieve public JSON data. This targets a well-known service and is consistent with the skill's stated purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external content such as post titles and subreddit descriptions. 1. Ingestion points:
getSubredditAboutandgetSubredditPostsfunctions inscripts/reddit-search.ts. 2. Boundary markers: Absent. 3. Capability inventory: The skill is restricted to network read operations and console output; it has no file system write or shell execution capabilities. 4. Sanitization: The script usesencodeURIComponentfor URL parameters, but does not sanitize the text content retrieved from Reddit. The risk is assessed as safe due to the lack of exploitable capabilities.
Audit Metadata