reddit-research
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-generated content from Reddit, creating an attack surface for indirect prompt injection where malicious instructions hidden in posts or comments could influence the agent's actions.\n
- Ingestion points: Multiple tools defined in
SKILL.mdandreferences/sandbase-api-map.md(e.g.,reddit_app_dynamic_search,reddit_app_post_details,reddit_app_post_comments) ingest external, attacker-controllable data into the agent context.\n - Boundary markers: There are no instructions or delimiters provided to help the agent distinguish between its own system instructions and the content retrieved from Reddit.\n
- Capability inventory: The skill uses
sandbase_call_toolto perform network operations for data retrieval. It does not have capabilities for writing to the local file system or executing shell commands.\n - Sanitization: The instructions do not specify any sanitization, filtering, or validation steps for the content retrieved from Reddit before it is processed.
Audit Metadata