reddit-marketing-agent

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from external Reddit threads and interpolate it directly into LLM prompts.
  • Ingestion points: The skill fetches submission.title and submission.selftext from Reddit via the praw library in SKILL.md.
  • Boundary markers: None detected. The thread content is directly embedded into the response generation prompt without delimiters or instructions to ignore nested commands.
  • Capability inventory: The agent generates responses that are logged to local JSON files and an SQLite database (reddit_marketing.db). The context suggests these responses are intended for eventual publication to Reddit.
  • Sanitization: No sanitization, escaping, or validation of the fetched Reddit content is performed before it is used to construct prompts for the openai API.
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download external code and dependencies.
  • Evidence: Clones the repository https://github.com/lucaswalter/reddit-marketing-agent.git and installs packages from requirements.txt using pip.
  • [COMMAND_EXECUTION]: The installation and usage instructions involve executing shell commands.
  • Evidence: Use of git clone and pip install for setup, as well as several Python-based CLI examples (python reddit_agent.py ...) for executing workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:49 PM