Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using the
abaCLI tool to perform browser-driven Reddit operations, including authentication listing and content retrieval. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing untrusted data from Reddit.
- Ingestion points: Reddit home feed posts (titles, body text) and user profile information retrieved via
aba reddit feedandaba reddit profilecommands. - Boundary markers: Absent; the instructions do not specify the use of delimiters or instructions for the agent to ignore embedded commands within retrieved content.
- Capability inventory: Shell command execution via the
abaCLI tool. - Sanitization: Absent; there is no requirement for filtering or escaping external content before the agent processes it.
- [SAFE]: The skill includes explicit security rules that prohibit the agent from reading or printing sensitive browser state files, such as
accounts.json,state.json, cookies, or authentication tokens, which is a significant safety measure against credential exfiltration. - [SAFE]: The provided link to the external repository
github.com/SainyTK/agent-browser-app-clicorresponds to the skill author's own development repository and is used appropriately for bug reporting and support.
Audit Metadata