reddit-customer-insights
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user-generated content from Reddit, creating an attack surface for indirect prompt injection.\n
- Ingestion points: Untrusted data is retrieved from Reddit posts and comments using tools such as
reddit_app_dynamic_searchandreddit_app_post_detailsas described in the workflow (SKILL.md, Step 4 & 5).\n - Boundary markers: The instructions do not specify the use of delimiters or unique markers (e.g., XML tags) to isolate the external Reddit content from the agent's primary system instructions.\n
- Capability inventory: The skill uses a tool gateway for data retrieval but does not demonstrate high-risk capabilities such as local file system modification or arbitrary shell command execution.\n
- Sanitization: There are no explicit instructions for the agent to sanitize, filter, or validate the fetched Reddit content to neutralize potential instructions embedded within the text.
Audit Metadata