apify-reddit-scraper

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit, including posts, comments, and user bios. Ingestion points: Scraped results are fetched from Apify datasets as described in SKILL.md. Boundary markers: The instructions explicitly warn the agent to treat scraped content as untrusted data and ignore any instructions within it. Capability inventory: The skill uses the apify CLI for network operations and writes data to the local file system at /tmp/reddit.json. Sanitization: It instructs the agent to quote content as plain text and ignore embedded instructions.\n- [COMMAND_EXECUTION]: The skill executes shell commands using the apify CLI (apify actors call, apify runs info, apify datasets get-items) to interact with the Apify platform and retrieve data.\n- [EXTERNAL_DOWNLOADS]: The skill fetches actor metadata and scraped results from the Apify platform via the CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:26 PM
Security Audit — agent-trust-hub — apify-reddit-scraper