reddit-leads
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches data from the vendor's API at
https://reddapi.dev. This is standard for its lead generation functionality. - [COMMAND_EXECUTION]: Uses
curlto communicate with the remote API and apython3one-liner to filter JSON response data locally. Both tools are used for their intended purpose of data retrieval and processing. - [PROMPT_INJECTION]: The skill processes untrusted third-party content from Reddit, creating a surface for indirect prompt injection. However, it includes robust defensive instructions to mitigate this risk.
- Ingestion points: Reddit post titles, content, and comment bodies returned by the Leads API.
- Boundary markers: Instructs the agent to visually separate third-party content using blockquotes or fenced blocks to differentiate it from instructions.
- Capability inventory: Uses
curlandpython3for API interaction and data manipulation. - Sanitization: Explicitly directs the agent to never treat text within a lead as a command, to ignore URLs or file paths found in lead content, and to never perform actions (like sending messages) based on lead data without user review.
Audit Metadata