subreddit-deep-research
Warn
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/fetch_rules_via_server.pyusesbrowser._run_js()to execute dynamically constructed JavaScript strings within the context of a web browser. This allows for arbitrary code execution in the user's browser environment. - [EXTERNAL_DOWNLOADS]: The skill depends on an external, unverified script located at
~/browser-helper/browser.py. This script is not bundled with the skill, and its integrity cannot be verified by the platform, posing a supply-chain risk. - [COMMAND_EXECUTION]: The skill instructions direct the user to execute a local Python script (
scripts/fetch_rules_via_server.py) which performs complex interactions with the file system and external browser processes. - [DATA_EXFILTRATION]: The included JavaScript uses the
{credentials: 'include'}fetch option, which forces the browser to use the user's active Reddit session (cookies and auth headers) to retrieve data. While intended for community rules, this mechanism allows for unauthorized data access using the user's identity. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Reddit (comments and top posts) via MCP tools like
get_post_comments. - Ingestion points: Reddit comment text and post bodies are processed by the agent.
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: The skill can execute local Python scripts and perform network operations.
- Sanitization: There is no evidence of filtering or sanitization of external Reddit content before it is processed by the agent.
Audit Metadata