reddit-insights

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingest untrusted data from external Reddit posts and comments which could contain malicious instructions designed to influence the agent's behavior during the analysis phase or report generation.
  • Ingestion points: Data is fetched from https://www.reddit.com JSON endpoints as described in SKILL.md Step 2.
  • Boundary markers: The instructions lack explicit delimiters or warnings to the agent to ignore instructions embedded within the retrieved Reddit content.
  • Capability inventory: The skill utilizes requests.get for network reads and uses shell redirection (cat) for local file writing in SKILL.md Step 5.
  • Sanitization: There is no evidence of sanitization, filtering, or escaping of the external Reddit content before it is interpolated into the final report or analyzed by the agent.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from Reddit's official public JSON API (e.g., https://www.reddit.com/search.json). Reddit is a well-known service, and this operation is central to the skill's stated purpose of market research.
  • [COMMAND_EXECUTION]: The skill uses a shell command (cat > reddit_research_[topic].md << 'EOF') to save the compiled research report to the local file system. This is a standard method for data persistence within the agent's environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 08:49 AM