Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Reddit, which could potentially contain hidden instructions for the agent.\n
- Ingestion points: Fetches posts, comments, and user profiles through
scripts/reddit_api.pyusing Reddit's public JSON API.\n - Boundary markers: The skill does not use explicit delimiters or instructions to notify the agent that the fetched content should be treated as untrusted data.\n
- Capability inventory: The skill is limited to performing GET requests and printing output; it lacks dangerous capabilities like local command execution, file system modifications, or high-risk network operations.\n
- Sanitization: Retrieved text content is truncated (e.g., to 500 or 300 characters), which provides a minor reduction in potential payload size but does not filter for malicious instruction patterns.
Audit Metadata