marketing-reddit-community-builder
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to monitor brand mentions and perform research across various subreddits. This ingestion of untrusted external data creates an attack surface where malicious content on Reddit could influence the agent's behavior.
- Ingestion points: External Reddit content (posts, comments, brand mentions) is processed for 'Subreddit Research', 'Reputation Monitoring', and 'Sentiment Analysis' as described in SKILL.md.
- Boundary markers: The instructions do not specify any boundary markers or instructions for the agent to ignore or delimit embedded commands within the ingested Reddit data.
- Capability inventory: The skill is designed to manage brand reputation, which implies capabilities to interact with the platform (commenting, posting), and is executed via a shell script wrapper.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the data retrieved from external Reddit sources before it is interpreted by the agent.
Audit Metadata