reddit-agent-marketing-department

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill interacts with untrusted external content from Reddit, creating a surface for indirect prompt injection attacks where malicious instructions in posts could influence agent behavior.
  • Ingestion points: Fetches post and comment data via Reddit's public API endpoints as seen in skills/reddit/scripts/.
  • Boundary markers: The skill instructions emphasize an "Approval-Gated Publishing" policy, ensuring no data is sent back to Reddit without human review.
  • Capability inventory: The skill can execute local Python scripts to fetch data, analyze content, and draft outreach messages.
  • Sanitization: Includes an "Anti-AI-Slop Review" to check for AI-generated patterns in outputs, though it lacks explicit technical sanitization for incoming adversarial prompts.
  • [COMMAND_EXECUTION]: The skill documentation guides the user to perform shell operations and execute local Python scripts to initialize and run the marketing workflows.
  • Evidence: Installation steps include git clone and cp -r commands, and operation examples use python skills/reddit/scripts/search_posts.py to run local automation scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:41 PM