reddit-subreddit-finder
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches content from external, untrusted sources (Reddit search results, subreddit descriptions, and post metadata) using the
reach fetch-reddittool. This data is processed to generate scoring, rule summaries, and entry angles. A malicious actor could craft subreddit descriptions or posts containing instructions aimed at influencing the agent's output or behavior. - Ingestion points:
reach fetch-reddit search,reach fetch-reddit sub-info, andreach fetch-reddit subcommands retrieve data from the public internet. - Boundary markers: No explicit delimiters or boundary markers are defined to isolate external data from the agent's internal instructions.
- Capability inventory: The skill has file-writing capabilities to the
~/Documents/auto-gtm/directory. - Sanitization: The instructions do not specify any sanitization or validation logic for the content retrieved from Reddit.
- [COMMAND_EXECUTION]: The skill constructs and executes commands using the
reachtoolset. The instructions involve interpolating user-provided or search-derived terms into shell-like commands (e.g.,reach fetch-reddit search "<terms>").
Audit Metadata