reddit-insights
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core function of processing untrusted data from an external source.
- Ingestion points: The skill fetches Reddit posts and comments via the
search_redditandget_post_commentsPython functions. - Boundary markers: No delimiters or instructions are provided to the agent to treat the fetched content as untrusted or to ignore embedded instructions.
- Capability inventory: The skill utilizes the
requestslibrary for network access and thebashshell for writing files to the disk. - Sanitization: No sanitization or filtering logic is implemented to strip potentially malicious directives from the fetched Reddit content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill fetches data from
reddit.com. This is a well-known service and the operation is necessary for the skill's stated purpose of Reddit research. - [COMMAND_EXECUTION]: The skill instructs the agent to use a shell command (
cat) to save the research report to the local file system. This is a standard operation for data persistence.
Audit Metadata