scrapesocial-reddit
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
scrapesocialCLI tool from the public NPM registry at a specific version.\n- [COMMAND_EXECUTION]: Uses thescrapesocialcommand-line tool to perform searches and data retrieval from Reddit.\n- [INDIRECT_PROMPT_INJECTION]: Processes untrusted user-generated content from Reddit, creating a surface for potential instruction injection.\n - Ingestion points: Reddit posts, comments, and advertising data are ingested into the agent context through various search and retrieval commands in
SKILL.md.\n - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat scraped Reddit content as untrusted data.\n
- Capability inventory: The skill primarily uses the
scrapesocialCLI to fetch data; it does not demonstrate file-writing or privileged system command execution.\n - Sanitization: The instructions do not specify any sanitization or validation of the content retrieved from Reddit before it is processed by the agent.
Audit Metadata