reddit-ads
Fail
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements persistence mechanisms by providing code for long-running background services. It utilizes the
cronlibrary in Node.js and theschedulelibrary in Python to establish recurring execution cycles (e.g., every 4 hours) that operate independently of the agent session. - [PROMPT_INJECTION]: The 'Agentic Optimization Service' is vulnerable to indirect prompt injection. It fetches external performance metrics from the Reddit Ads API and injects them directly into an LLM prompt (
analyzeWithAgent) without sanitization or boundary markers. Malicious data within campaign names or metadata could manipulate the agent's logic to perform unintended actions. - [COMMAND_EXECUTION]: The skill facilitates autonomous financial operations by programmatically executing LLM-generated recommendations. The agent's output is parsed as JSON and used to directly trigger write-access API calls that modify ad status (
updateAd) and increase financial budgets (updateAdGroup) without human review. - [REMOTE_CODE_EXECUTION]: The skill relies on the
anthropicSDK to process data and generate actions. While the LLM service itself is trusted, the flow of unvalidated remote data into an execution path that modifies live account configurations represents an automated risk vector.
Recommendations
- AI detected serious security threats
Audit Metadata