reddit-automation
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection.
- Ingestion points: The skill retrieves potentially untrusted content from Reddit using tools such as REDDIT_SEARCH_ACROSS_SUBREDDITS, REDDIT_RETRIEVE_POST_COMMENTS, and REDDIT_RETRIEVE_REDDIT_POST as described in SKILL.md.
- Boundary markers: There are no boundary markers or instructions to ignore embedded commands within the retrieved text.
- Capability inventory: The skill includes write-access tools like REDDIT_CREATE_REDDIT_POST, REDDIT_POST_REDDIT_COMMENT, REDDIT_EDIT_REDDIT_COMMENT_OR_POST, and REDDIT_DELETE_REDDIT_POST (SKILL.md).
- Sanitization: No sanitization or validation logic is defined for the content fetched from Reddit before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references an external MCP server endpoint.
- Evidence: SKILL.md instructs users to add https://rube.app/mcp as an MCP server. This is a vendor-provided service necessary for the skill's functionality.
Audit Metadata