reply-writer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data, specifically the text of a Reddit post and its top replies, which constitutes an attack surface for indirect prompt injection.
- Ingestion points:
SKILL.md(Step 1) instructs the agent to ask the user for "Original post" and "Top existing replies". - Boundary markers: The instructions do not define clear delimiters or specific warnings to ignore instructions embedded within the Reddit content, though the skill does have internal logic to skip hostile threads.
- Capability inventory: The skill is restricted to text generation; it does not utilize any tools for command execution, file system access, or network operations.
- Sanitization: There is no evidence of sanitization or filtering of the ingested Reddit content.
Audit Metadata