reddit-sentiment
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external source (Reddit post titles) which serves as a surface for indirect prompt injection attacks.
- Ingestion points: Fetches post titles and engagement data from Reddit's search API and WebSearch snippets (SKILL.md, Steps 2 and 3).
- Boundary markers: There are no explicit instructions or delimiters used to warn the agent to ignore potential instructions embedded within the fetched post titles.
- Capability inventory: The skill uses WebFetch and WebSearch to retrieve external content.
- Sanitization: The skill does not implement filtering, escaping, or validation of the retrieved text strings before they are processed by the LLM for sentiment scoring.
Audit Metadata