reddit-brand-mention-triage
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the @reddgrow/cli tool from the NPM registry to interface with the ReddGrow brand monitoring service.
- [COMMAND_EXECUTION]: The skill executes shell commands via the reddgrow CLI to manage domain lists, authenticate with an API key, and retrieve Reddit mention data and thread contents.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted data from live Reddit threads to perform classification and sentiment analysis. * Ingestion points: Reddit mentions and full thread comments are fetched via the reddgrow CLI as documented in references/commands.md. * Boundary markers: There are no explicit delimiters or warnings provided to the agent to distinguish external thread content from system instructions. * Capability inventory: The agent has the ability to execute CLI commands to update monitoring status and fetch further external data. * Sanitization: The skill does not implement or describe any sanitization or filtering of the retrieved Reddit content before processing.
Audit Metadata