reddit-leads

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from the vendor's API at https://reddapi.dev. This is standard for its lead generation functionality.
  • [COMMAND_EXECUTION]: Uses curl to communicate with the remote API and a python3 one-liner to filter JSON response data locally. Both tools are used for their intended purpose of data retrieval and processing.
  • [PROMPT_INJECTION]: The skill processes untrusted third-party content from Reddit, creating a surface for indirect prompt injection. However, it includes robust defensive instructions to mitigate this risk.
  • Ingestion points: Reddit post titles, content, and comment bodies returned by the Leads API.
  • Boundary markers: Instructs the agent to visually separate third-party content using blockquotes or fenced blocks to differentiate it from instructions.
  • Capability inventory: Uses curl and python3 for API interaction and data manipulation.
  • Sanitization: Explicitly directs the agent to never treat text within a lead as a command, to ignore URLs or file paths found in lead content, and to never perform actions (like sending messages) based on lead data without user review.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 09:18 PM
Security Audit — agent-trust-hub — reddit-leads