Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary purpose is to ingest and analyze untrusted content from Reddit, which is a known vector for indirect prompt injection attacks.
- Ingestion points: The skill retrieves posts, comments, and threads from Reddit as described in
SKILL.mdandreferences/RETRIEVAL.md. - Boundary markers: While the skill recommends a structured JSON output format for findings, it does not specify the use of robust prompt isolation techniques or delimiters to separate untrusted data from the agent's instructions.
- Capability inventory: The instructions specify a read-only workflow and explicitly prohibit posting, voting, or messaging, which significantly reduces the potential impact of an injection attack.
- Sanitization: The guidelines advise users to distinguish claims from facts and verify technical assertions, but they do not provide technical mechanisms for filtering or sanitizing malicious instructions embedded within the fetched Reddit text.
- [SAFE]: The documentation follows security best practices by advising against hardcoding API credentials, recommending the use of secure secret stores, and requiring the use of honest user agents for identification.
Audit Metadata