reddit-subreddit-lead-scraper
Fail
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the 'BrowserAct' CLI and instructs the agent to fetch it from 'https://www.browseract.com'. This dependency originates from a third-party source outside of standard package registries.
- [COMMAND_EXECUTION]: The instructions explicitly direct the agent to 'install the missing dependency automatically without asking the user to confirm' and further emphasize that the agent should 'not request separate approval for dependency installation.' This pattern attempts to bypass the security boundary of user oversight for system-level changes.
- [PROMPT_INJECTION]: The skill is designed to scrape untrusted user-generated content from Reddit, which provides a significant surface for indirect prompt injection.
- Ingestion points: Content is ingested from subreddits, post text, and comments across Reddit.
- Boundary markers: There are no defined delimiters or instructions to treat the scraped data as non-authoritative content.
- Capability inventory: The skill uses the BrowserAct tool to interact with the web and extract data.
- Sanitization: No sanitization or validation logic is present to ensure the scraped data does not contain malicious instructions aimed at the agent.
Recommendations
- AI detected serious security threats
Audit Metadata