reddit-voice
Warn
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
rdtx.mjsexecutes external binaries includingyt-dlpfor media archiving and a browser automation tool specified via theRDTX_AGENT_BROWSERenvironment variable. - [REMOTE_CODE_EXECUTION]: The skill utilizes an
evalInPagefunction inrdtx.mjsto execute dynamically generated JavaScript code within the context of a browser tab via the Chrome DevTools Protocol (CDP). - [CREDENTIALS_UNSAFE]: To enable media downloads for age-restricted content, the skill exports active browser session cookies to a local plaintext file located at
~/.rdtx/cookies.txt. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it processes untrusted content from live Reddit posts and comments to perform register analysis.
- Ingestion points: Live Reddit data fetched via search and subreddit listings in
scripts/rdtx.mjs. - Boundary markers: The skill output includes a plain-text note advising the agent to use the data for qualitative judgment rather than rote imitation, but it lacks structural delimiters to isolate external content.
- Capability inventory: The skill has the ability to write to the filesystem, execute shell commands, and perform authenticated writes (posts/comments) to Reddit.
- Sanitization: Employs basic escaping via
JSON.stringifybefore interpolating data into strings intended for JavaScript evaluation.
Audit Metadata