reddit-comment-writer
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the
agent-browsertool from thevercel-labsGitHub organization, which is a recognized trusted source for browser automation capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Reddit threads and external product websites to generate summaries and drafts. This creates a surface for indirect prompt injection where instructions embedded in a Reddit post could theoretically influence the agent's behavior. However, the skill implements strict rules for formatting and content through
rules/spam-signals.mdandrules/style-guide.md, which act as behavioral constraints. No explicit sanitization or boundary markers (like XML tags) are mentioned in the prompts. - [COMMAND_EXECUTION]: Uses Playwright (
mcp__playwright__) andagent-browserfor navigating and interacting with web pages. These are necessary for the skill's primary function of reading and posting to Reddit when APIs are unavailable.
Audit Metadata