reddit-thread-fit-check
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted content from Reddit, creating a surface for indirect prompt injection. \n
- Ingestion points: SKILL.md specifies data ingestion from subreddit profiles, post metadata, comment trees, and user comment history via the UnifAPI reddit endpoints.\n
- Boundary markers: The instructions do not define specific delimiters for external data to separate it from agent instructions.\n
- Capability inventory: The skill is restricted to read-only data access. It lacks tools for file system modification, shell command execution, or automated social media interactions such as posting or voting.\n
- Sanitization: No explicit sanitization or filtering logic is provided for the fetched Reddit data.\n- [EXTERNAL_DOWNLOADS]: The skill retrieves data through the UnifAPI service. These operations and the referenced installation plugins (unifapi-agent/agents) are vendor-owned resources that align with the skill's purpose and the author's identity, representing standard functionality.
Audit Metadata