reddit-reading
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a legitimate data retrieval function using standard Python libraries and follows secure practices for handling API credentials via environment variables.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a surface for indirect prompt injection by retrieving untrusted data from Reddit.
- Ingestion points: External data enters the agent context through
scripts/reddit.pywhich queries Reddit's public RSS/Atom feeds and OAuth API. - Boundary markers: The rendered output in
scripts/reddit.pydoes not enclose the retrieved Reddit content in delimiters to prevent the agent from following instructions found in comments. - Capability inventory: The skill is restricted to network read access for Reddit domains and does not possess capabilities for file modification or system command execution.
- Sanitization: The
strip_htmlfunction inscripts/reddit.pysanitizes input by removing HTML tags and specific footer patterns (e.g., 'submitted by /u/...'), reducing the likelihood of basic tag-based injection.
Audit Metadata