reddit-skill
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface.
- Ingestion points: Untrusted content from Reddit (comments, post text, and user bios) is ingested through multiple scripts including
scripts/submission.sh,scripts/search.sh, andscripts/subreddit_top.sh. - Boundary markers: The scripts do not wrap the retrieved external content in specific delimiters or include instructions for the agent to disregard commands embedded within the fetched data.
- Capability inventory: The skill provides write capabilities, specifically
scripts/post_create.sh(creating posts),scripts/comment_reply.sh(replying to comments), andscripts/subreddit_subscribe.sh(subscribing to subreddits). - Sanitization: While scripts use Python's JSON parser to ensure data integrity, they do not perform semantic analysis or filtering of the text content for adversarial prompt patterns.
Audit Metadata