reddit-sentiment-pulse
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the Scavio MCP and REST API (
mcp.scavio.dev,api.scavio.dev) to fetch Reddit and social media data. These are vendor-owned resources from 'scavio-ai' and represent standard functionality for this skill's stated purpose.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit threads and comments (File:SKILL.md). - Ingestion points: Data enters via the Scavio MCP or REST API endpoints during searches and thread fetches (Step 1, 3, 4).
- Boundary markers: The instructions explicitly mandate the use of markdown headers and bold labels for the final report to maintain structure, but do not specify specific 'ignore' delimiters for the fetched raw content.
- Capability inventory: The skill performs network operations via the Scavio API but does not exhibit file-write, command execution, or code evaluation capabilities.
- Sanitization: The skill includes instructions to be skeptical of brigading and astroturfing (Edge Cases), providing a level of human-in-the-loop and logic-based filtering of external content.- [SAFE]: The skill mentions providing 50 free credits upon signup for the Scavio platform. While this is a promotional offer, it is presented in the context of the vendor's service and does not involve malicious credential harvesting or financial scams.
Audit Metadata