The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit through its read, voice, archive, and scout commands. This data (posts and comments) is ingested, summarized, and analyzed, creating a potential surface for indirect prompt injection if the resulting content is interpolated into an agent's prompt context without strict boundary markers.
Ingestion points: Reddit API responses from endpoints like /search.json, /about.json, and /comments/...json are processed in scripts/rdtx.mjs and scripts/rdtx-contracts.mjs.
Capability inventory: The skill possesses capabilities to write files (audit logs, archives), control a browser session via agent-browser, and execute external subprocesses (yt-dlp, ffmpeg).
Boundary markers: The current implementation does not appear to wrap interpolated external data in explicit security delimiters or warnings.
Sanitization: Employs basic string sanitization such as .slice() for length limiting and token filtering against a predefined stopword list in summarizeVoice.
[DYNAMIC_EXECUTION]: The skill uses Runtime.evaluate via CDP to execute JavaScript directly within the browser session context. This is the primary mechanism for interacting with the Reddit page as a same-origin client. While inputs are stringified via JSON.stringify before interpolation, this represents a high-privilege interaction model with the user's browser.
[DATA_EXPOSURE_AND_EXFILTRATION]: In scripts/rdtx.mjs, the skill exports the user's active Reddit session cookies to a local file (~/.rdtx/cookies.txt) to facilitate authenticated downloads for yt-dlp. Although the skill attempts to mitigate risk by creating the file with restricted permissions (0o600), the presence of raw authentication material in a local file is a sensitive data handling pattern.
[UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill relies on external command-line utilities, specifically agent-browser, yt-dlp, and ffmpeg. These are executed as subprocesses using arguments derived from both user input and Reddit API data (e.g., media URLs).

reddit-post