reddit-voc

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs network requests to api.scrapecreators.com to fetch Reddit content, which is the primary function of the tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Reddit threads and comments. Ingestion points: JSON files in the local runs/ directory containing raw comment data. Boundary markers: Synthesis instructions in SKILL.md provide task-specific scoping (e.g., Pain Points, Desires). Capability inventory: Bash, Read, and Write tools are used to execute the local Python script and manage files. Sanitization: Basic filtering of deleted or removed comments is performed in fetch_reddit.py.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill utilizes an API key stored in a project-local text file (scrapecreators-key.txt) and includes explicit instructions to the agent to avoid leaking or displaying the key in any output, following secure development practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 09:12 PM