reddit-marketing-agent
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted data from external Reddit threads and interpolate it directly into LLM prompts.
- Ingestion points: The skill fetches
submission.titleandsubmission.selftextfrom Reddit via theprawlibrary inSKILL.md. - Boundary markers: None detected. The thread content is directly embedded into the response generation prompt without delimiters or instructions to ignore nested commands.
- Capability inventory: The agent generates responses that are logged to local JSON files and an SQLite database (
reddit_marketing.db). The context suggests these responses are intended for eventual publication to Reddit. - Sanitization: No sanitization, escaping, or validation of the fetched Reddit content is performed before it is used to construct prompts for the
openaiAPI. - [EXTERNAL_DOWNLOADS]: The skill instructs the user to download external code and dependencies.
- Evidence: Clones the repository
https://github.com/lucaswalter/reddit-marketing-agent.gitand installs packages fromrequirements.txtusingpip. - [COMMAND_EXECUTION]: The installation and usage instructions involve executing shell commands.
- Evidence: Use of
git cloneandpip installfor setup, as well as several Python-based CLI examples (python reddit_agent.py ...) for executing workflows.
Audit Metadata