reddit-wizard
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external Reddit pages, which could contain instructions aimed at influencing the agent's behavior during the analysis phase.
- Ingestion points: Step 1 and Step 2 utilize the
olosteptool to scrape markdown content fromold.reddit.comsubreddits. - Boundary markers: No explicit delimiters or boundary markers are defined to isolate the scraped content from the agent's instructions.
- Capability inventory: The skill is configured to use
tavilyfor search andolostepfor scraping; it does not have permissions for arbitrary file writes, sensitive credential access, or shell command execution beyond the provided tools. - Sanitization: There is no evidence of validation or sanitization performed on the content retrieved from Reddit before it is processed by the agent.
Audit Metadata