marketing-reddit-community-builder
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/run.sh) used to launch the agent via a local Python runner. This is a standard execution pattern for this platform. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it is designed to ingest and act upon untrusted data from the Reddit platform.
- Ingestion points: The skill performs 'Reputation Monitoring' and 'Brand mention tracking' as described in
SKILL.md. - Boundary markers: There are no instructions or delimiters defined to help the agent distinguish between its system instructions and content found in external Reddit posts.
- Capability inventory: The skill is capable of generating responses, monitoring sentiment, and planning AMAs based on external input.
- Sanitization: There is no mention of sanitization or validation for the content retrieved from external Reddit mentions.
Audit Metadata