reddit-insights

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches data from Reddit's public JSON API endpoints using the Python requests library. This is a well-known service used for the skill's primary research purpose.
  • [COMMAND_EXECUTION]: Uses the shell command cat to save research findings into Markdown files on the local file system.
  • [PROMPT_INJECTION]: The skill processes untrusted data from Reddit posts and comments, creating an exposure to indirect prompt injection.
  • Ingestion points: External data enters the agent context via the search_reddit and get_post_comments functions in SKILL.md.
  • Boundary markers: The instructions do not include specific delimiters or warnings to ignore instructions that might be embedded in the fetched Reddit text.
  • Capability inventory: The agent has the capability to write files to the system using shell commands.
  • Sanitization: No sanitization or filtering of the external Reddit content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 12:07 PM