reddit-voc
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs network requests to api.scrapecreators.com to fetch Reddit content, which is the primary function of the tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Reddit threads and comments. Ingestion points: JSON files in the local runs/ directory containing raw comment data. Boundary markers: Synthesis instructions in SKILL.md provide task-specific scoping (e.g., Pain Points, Desires). Capability inventory: Bash, Read, and Write tools are used to execute the local Python script and manage files. Sanitization: Basic filtering of deleted or removed comments is performed in fetch_reddit.py.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill utilizes an API key stored in a project-local text file (scrapecreators-key.txt) and includes explicit instructions to the agent to avoid leaking or displaying the key in any output, following secure development practices.
Audit Metadata