reddapi
Warn
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (MEDIUM): The skill is designed to ingest and process arbitrary content from Reddit. This external data is untrusted and could contain malicious instructions designed to manipulate the agent (Tool Output Poisoning).\n
- Ingestion points: Reddit posts and comments retrieved via the
semantic searchandtrendsendpoints.\n - Boundary markers: Absent; no delimiters or instructions to ignore embedded commands are visible in the documentation.\n
- Capability inventory: The skill utilizes
curlfor network requests andpython3for data processing, providing a surface for command-based activities.\n - Sanitization: No sanitization or filtering of the retrieved Reddit content is demonstrated.\n- External Downloads (MEDIUM): Installation instructions use
npx skills addto download the skill from an untrusted external repository (lignertys/reddit-research-skills).\n- Command Execution (LOW): The skill's implementation patterns rely on shell-based commands (curl) and pipedpython3 -csnippets, which increase the potential attack surface.\n- Data Exfiltration (LOW): The skill performs network operations toreddapi.dev. While this is the intended service, it is a non-whitelisted third-party domain that represents an external communication channel.
Audit Metadata