reddit-insights
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill fetches data from Reddit's public JSON API. This is a well-known service and the operation is used to gather the research data described in the skill's documentation.
- [COMMAND_EXECUTION]: Uses a shell command to save research reports to a local markdown file. The implementation employs a quoted heredoc (
<< 'EOF'), which prevents the shell from evaluating variables or commands within the ingested Reddit content during the file-write process. - [PROMPT_INJECTION]: The skill processes untrusted user-generated content from Reddit, which introduces a surface for indirect prompt injection.
- Ingestion points: External text from Reddit posts and comments is ingested into the agent context via Python requests in SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or instructions to ignore potential commands embedded within the retrieved Reddit content.
- Capability inventory: The skill can perform network requests and write to the local filesystem.
- Sanitization: There is no explicit sanitization or filtering of the ingested Reddit data before it is processed by the agent or written to disk.
Audit Metadata