reddit-voice

Warn

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script rdtx.mjs executes external binaries including yt-dlp for media archiving and a browser automation tool specified via the RDTX_AGENT_BROWSER environment variable.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes an evalInPage function in rdtx.mjs to execute dynamically generated JavaScript code within the context of a browser tab via the Chrome DevTools Protocol (CDP).
  • [CREDENTIALS_UNSAFE]: To enable media downloads for age-restricted content, the skill exports active browser session cookies to a local plaintext file located at ~/.rdtx/cookies.txt.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted content from live Reddit posts and comments to perform register analysis.
  • Ingestion points: Live Reddit data fetched via search and subreddit listings in scripts/rdtx.mjs.
  • Boundary markers: The skill output includes a plain-text note advising the agent to use the data for qualitative judgment rather than rote imitation, but it lacks structural delimiters to isolate external content.
  • Capability inventory: The skill has the ability to write to the filesystem, execute shell commands, and perform authenticated writes (posts/comments) to Reddit.
  • Sanitization: Employs basic escaping via JSON.stringify before interpolating data into strings intended for JavaScript evaluation.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Aug 6, 2026, 07:52 PM
Security Audit — agent-trust-hub — reddit-voice