reddit-commenter
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from Reddit posts and external websites to generate automated comments, creating a surface for indirect prompt injection.
- Ingestion points: The agent ingests data from Reddit post titles, descriptions, existing comments, and external URLs provided by users within those posts (found in SKILL.md, Step 2 and Step 3).
- Boundary markers: There are no explicit instructions or delimiters defined to separate the untrusted external content from the agent's core instructions.
- Capability inventory: The agent possesses the ability to navigate to arbitrary URLs, click UI elements, and type text (post comments) via Playwright MCP. It also has write access to local tracking and lead files (SKILL.md, Step 6 and Step 8).
- Sanitization: No sanitization, filtering, or validation of the ingested external content is mentioned in the workflow before it is used for decision-making and comment drafting.
Audit Metadata