reddit-insights
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingest untrusted data from external Reddit posts and comments which could contain malicious instructions designed to influence the agent's behavior during the analysis phase or report generation.
- Ingestion points: Data is fetched from
https://www.reddit.comJSON endpoints as described inSKILL.mdStep 2. - Boundary markers: The instructions lack explicit delimiters or warnings to the agent to ignore instructions embedded within the retrieved Reddit content.
- Capability inventory: The skill utilizes
requests.getfor network reads and uses shell redirection (cat) for local file writing inSKILL.mdStep 5. - Sanitization: There is no evidence of sanitization, filtering, or escaping of the external Reddit content before it is interpolated into the final report or analyzed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill fetches data from Reddit's official public JSON API (e.g.,
https://www.reddit.com/search.json). Reddit is a well-known service, and this operation is central to the skill's stated purpose of market research. - [COMMAND_EXECUTION]: The skill uses a shell command (
cat > reddit_research_[topic].md << 'EOF') to save the compiled research report to the local file system. This is a standard method for data persistence within the agent's environment.
Audit Metadata