reddit-post
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The rdtx utility executes local shell commands and binaries, including agent-browser, yt-dlp, and Google Chrome, to perform its automation and media processing functions (as seen in scripts/rdtx.mjs).
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks due to its ingestion of external Reddit data. Ingestion points: Untrusted data from Reddit posts, comments, and messages are read into the agent's context through rdtx read, rdtx inbox, and rdtx archive operations. Boundary markers: No clear boundary markers or instructions are provided to the agent to distinguish between its instructions and the processed Reddit content. Capability inventory: The skill can execute browser automation commands and write archived data to the local file system. Sanitization: Reddit content is processed without explicit sanitization before being stored or presented.
- [EXTERNAL_DOWNLOADS]: The skill references and relies on external software, specifically agent-browser (from Vercel Labs) and rdt-cli (from jackwener/rdt-cli), as part of its setup and operation.
Audit Metadata