reddit-reading
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted posts and comments from Reddit, which could contain malicious instructions designed to manipulate the agent.
- Ingestion points: Data is fetched from Reddit's public RSS/Atom feeds and OAuth endpoints in
scripts/reddit.py. - Boundary markers: Absent. The skill does not currently use delimiters or warnings to isolate external data from the agent's core instructions.
- Capability inventory: The skill uses the
terminaltool to execute a Python script that performs network requests viaurllib.requestinscripts/reddit.py. - Sanitization: The skill performs HTML stripping and length truncation in
scripts/reddit.py, but it does not filter for potential prompt injection patterns. - [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local Python script via a terminal tool. While the script uses standard library parsing for arguments, the agent must ensure that user-provided search terms or URLs are correctly handled to avoid potential command-line injection issues if the shell environment is not strictly controlled.
Audit Metadata