reddit-insights
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches data from Reddit's public JSON API endpoints using the Python
requestslibrary. This is a well-known service used for the skill's primary research purpose. - [COMMAND_EXECUTION]: Uses the shell command
catto save research findings into Markdown files on the local file system. - [PROMPT_INJECTION]: The skill processes untrusted data from Reddit posts and comments, creating an exposure to indirect prompt injection.
- Ingestion points: External data enters the agent context via the
search_redditandget_post_commentsfunctions inSKILL.md. - Boundary markers: The instructions do not include specific delimiters or warnings to ignore instructions that might be embedded in the fetched Reddit text.
- Capability inventory: The agent has the capability to write files to the system using shell commands.
- Sanitization: No sanitization or filtering of the external Reddit content is performed before processing.
Audit Metadata