reddit-fetch
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands for system process management and data handling. Specifically, the agent is prompted to use
pkill -f ms-playwright-mcpto terminate stale browser instances andcurlwithjqfor fetching and parsing data inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Reddit, creating a potential surface for indirect prompt injection attacks where malicious data could influence the agent's behavior. Ingestion points: Data is pulled from Reddit's public JSON API and DOM elements (e.g.,
shreddit-comment) viabrowser_evaluateandcurlinSKILL.md. Boundary markers: There are no specific instructions inSKILL.mdto wrap the ingested Reddit content in delimiters or include warnings to ignore embedded instructions when presenting the data to the user. Capability inventory: The skill utilizes capabilities includingbrowser_navigate,browser_evaluate, and shell command execution (pkill,curl) as described inSKILL.md. Sanitization: The skill performs structural sanitization by parsing JSON into specific objects (extractingtitle,score,id) and suggests truncating long comment bodies usingslicemethods in the browser scripts.
Audit Metadata