reddit-fetch

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands for system process management and data handling. Specifically, the agent is prompted to use pkill -f ms-playwright-mcp to terminate stale browser instances and curl with jq for fetching and parsing data in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Reddit, creating a potential surface for indirect prompt injection attacks where malicious data could influence the agent's behavior. Ingestion points: Data is pulled from Reddit's public JSON API and DOM elements (e.g., shreddit-comment) via browser_evaluate and curl in SKILL.md. Boundary markers: There are no specific instructions in SKILL.md to wrap the ingested Reddit content in delimiters or include warnings to ignore embedded instructions when presenting the data to the user. Capability inventory: The skill utilizes capabilities including browser_navigate, browser_evaluate, and shell command execution (pkill, curl) as described in SKILL.md. Sanitization: The skill performs structural sanitization by parsing JSON into specific objects (extracting title, score, id) and suggests truncating long comment bodies using slice methods in the browser scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 05:27 PM