skills/sainytk/skills/reddit/Gen Agent Trust Hub

reddit

Pass

Audited by Gen Agent Trust Hub on Aug 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the aba CLI tool to perform browser-driven Reddit operations, including authentication listing and content retrieval.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing untrusted data from Reddit.
  • Ingestion points: Reddit home feed posts (titles, body text) and user profile information retrieved via aba reddit feed and aba reddit profile commands.
  • Boundary markers: Absent; the instructions do not specify the use of delimiters or instructions for the agent to ignore embedded commands within retrieved content.
  • Capability inventory: Shell command execution via the aba CLI tool.
  • Sanitization: Absent; there is no requirement for filtering or escaping external content before the agent processes it.
  • [SAFE]: The skill includes explicit security rules that prohibit the agent from reading or printing sensitive browser state files, such as accounts.json, state.json, cookies, or authentication tokens, which is a significant safety measure against credential exfiltration.
  • [SAFE]: The provided link to the external repository github.com/SainyTK/agent-browser-app-cli corresponds to the skill author's own development repository and is used appropriately for bug reporting and support.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 12, 2026, 04:43 PM
Security Audit — agent-trust-hub — reddit