reddit-fetch
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
tmuxto manage and interact with a terminal session where thegeminiCLI is executed. It instructs the agent to create sessions, send input, and capture the resulting output from the pane. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) through the processing of external content.
- Ingestion points: Untrusted content from Reddit is fetched via the
geminiCLI and introduced into the agent's context using thetmux capture-panecommand as described in SKILL.md. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its operational guidelines and potentially malicious instructions embedded in the fetched Reddit content.
- Capability inventory: The agent is granted the capability to execute shell commands via
tmuxand observe output, which could be exploited if malicious content is processed. - Sanitization: The skill lacks any mechanism for sanitizing, validating, or filtering the data captured from the Reddit interface before it is ingested by the agent.
Audit Metadata