reddit-research

Warn

Audited by Gen Agent Trust Hub on Sep 27, 2026

Risk Level: MEDIUMPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill contains a dedicated section titled "Anti-KI-Detection Rules" that provides explicit instructions for the agent to hide its AI nature. It mandates the intentional use of human-like errors (e.g., typos like "teh", "adn", "wierd"), the omission of proper punctuation (e.g., "wasnt", "dont"), and the use of specific informal slang to bypass detection by human moderators or automated AI detectors.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted third-party content from Reddit posts and comments.
  • Ingestion points: Untrusted data enters the agent context through the /reddit-scan, /reddit-draft, and /reddit-insights workflows, which read external posts.
  • Boundary markers: The instructions lack any boundary markers or warnings to distinguish between the agent's instructions and the content retrieved from Reddit.
  • Capability inventory: The skill utilizes shell commands (curl, jq) and browser automation tools (Claude-in-Chrome MCP).
  • Sanitization: No sanitization, filtering, or validation steps are defined for the incoming external data.
  • [COMMAND_EXECUTION]: The skill provides multiple bash command templates using curl and jq for the agent to execute. These commands are intended to fetch data from Reddit's JSON API directly from the terminal.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from reddit.com. To facilitate this, it provides specific instructions to spoof the User-Agent header (e.g., mimicking a Chrome browser on Windows) specifically to bypass Reddit's 403 Forbidden errors that block standard automated tools.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 27, 2026, 09:07 PM