reddit-thread-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external Reddit threads, which creates a surface for indirect prompt injection where malicious content in a thread could attempt to influence the agent's behavior.
- Ingestion points: Step 1 in
SKILL.mdinstructs the agent to useWebFetchto load and parse content from user-provided Reddit URLs. - Boundary markers: The instructions do not include specific delimiters or "ignore embedded instructions" warnings to separate the Reddit data from the agent's internal logic.
- Capability inventory: The skill's capabilities are limited to text analysis and report generation; no dangerous capabilities such as file system writing, command execution, or network exfiltration were identified across the instructions.
- Sanitization: There is no mention of sanitizing, escaping, or filtering the content retrieved from Reddit before it is processed by the model.
Audit Metadata