reddit-research
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with official vendor domains (api.xpoz.ai and mcp.xpoz.ai) to retrieve authentication tokens and search results. This is standard behavior for an API-integrated skill.- [COMMAND_EXECUTION]: The skill uses local commands like mcporter and curl to configure the environment and fetch trial access keys. These operations are explicitly guided and require user participation or configuration of the vendor's own tools.- [PROMPT_INJECTION]: The skill processes untrusted data from Reddit posts, creating an indirect prompt injection surface. Embedded instructions in Reddit content could attempt to influence the agent's analysis.
- Ingestion points: Reddit post titles, bodies, and usernames via the getRedditPostsByKeywords and getRedditUsersByKeywords tools.
- Boundary markers: Absent; the skill does not explicitly instruct the agent to ignore or delimit embedded instructions within the processed Reddit data.
- Capability inventory: subprocess.run (used for mcporter configuration), file system access (~/.cache/xpoz-oauth/ for auth state).
- Sanitization: No explicit sanitization or filtering of external content is implemented in the provided scripts.- [DATA_EXFILTRATION]: No unauthorized exfiltration of sensitive local data (e.g., SSH keys, AWS credentials) was detected. Network operations are restricted to the vendor's infrastructure for the purpose of the skill's primary function.
Audit Metadata