reddit-agent-marketing-department
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted external content from Reddit, creating a surface for indirect prompt injection attacks where malicious instructions in posts could influence agent behavior.
- Ingestion points: Fetches post and comment data via Reddit's public API endpoints as seen in
skills/reddit/scripts/. - Boundary markers: The skill instructions emphasize an "Approval-Gated Publishing" policy, ensuring no data is sent back to Reddit without human review.
- Capability inventory: The skill can execute local Python scripts to fetch data, analyze content, and draft outreach messages.
- Sanitization: Includes an "Anti-AI-Slop Review" to check for AI-generated patterns in outputs, though it lacks explicit technical sanitization for incoming adversarial prompts.
- [COMMAND_EXECUTION]: The skill documentation guides the user to perform shell operations and execute local Python scripts to initialize and run the marketing workflows.
- Evidence: Installation steps include
git cloneandcp -rcommands, and operation examples usepython skills/reddit/scripts/search_posts.pyto run local automation scripts.
Audit Metadata