reddit-post
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node:child_process.execFileto invoke external CLI tools, specificallyagent-browserfor CDP-based browser interaction andyt-dlpfor downloading media content from Reddit. - [DATA_EXFILTRATION]: The skill accesses sensitive session data, such as Reddit cookies, but only to export them to a local file (
~/.rdtx/cookies.txt) for use byyt-dlp. No evidence of data being sent to unauthorized external servers was found; all network operations are directed at official Reddit API endpoints. - [SAFE]: The skill implements significant safety controls: all write operations (submitting posts or comments) require an explicit
--yesflag, performing a dry-run by default. Additionally, it maintains a local audit trail in~/.rdtx/audit.jsonlto ensure transparency of the agent's actions. - [SAFE]: The skill uses
JSON.stringifyto sanitize and wrap user-provided content before executing it within the browser context viaeval, preventing potential code injection from post titles or bodies into the automation script.
Audit Metadata