reddit-research
Fail
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: HIGHINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted Reddit discussions, which can be used for indirect prompt injection attacks.\n
- Ingestion points: Fetches Reddit post data using getRedditPostsByKeywords.\n
- Boundary markers: Absent; the agent is not instructed to use delimiters for the fetched content.\n
- Capability inventory: Includes subprocess.run for CLI tool configuration and urllib.request for network access.\n
- Sanitization: Absent; the data is analyzed directly for sentiment and themes.\n- [REMOTE_CODE_EXECUTION]: Automated scanners identified a pattern where remote data is fetched and then used in a command-line execution.\n
- Evidence: The script exchanges an OAuth code for a token at https://mcp.xpoz.ai/oauth/token and applies it using subprocess.run.\n
- Context: This is verified as a standard authentication flow for the vendor's service.\n- [COMMAND_EXECUTION]: The skill uses subprocess.run to configure the mcporter tool with necessary API headers.\n- [EXTERNAL_DOWNLOADS]: The skill requests the installation of vendor-owned packages xpoz and @xpoz/xpoz and connects to the vendor's infrastructure.
Recommendations
- HIGH: Downloads and executes remote code from: https://mcp.xpoz.ai/oauth/token - DO NOT USE without thorough review
Audit Metadata