The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the Bash tool to run a local Python helper script (reddit.py). It implements strict input validation, including regex-based subreddit name checks and length limits for post titles and bodies, which effectively mitigates common shell injection risks.
[DATA_EXFILTRATION]: The skill manages sensitive Reddit session cookies and OAuth tokens with high security. The cookie_header function in reddit.py ensures that credentials are only transmitted to .reddit.com subdomains. Additionally, a custom NoRedirect class is used to prevent the urllib client from following redirects, ensuring that credentials are never leaked to external or malicious domains during an HTTP session.
[DATA_EXFILTRATION]: The script includes dedicated error-handling logic that identifies and suppresses raw HTTP error responses. This prevents 'reflected credential material' (secrets that might appear in Reddit's error pages) from being returned to the agent's context or displayed to the user.
[INDIRECT_PROMPT_INJECTION]:
Ingestion points: The skill reads external data such as subreddit rules, search results, and recent comments from the Reddit API.
Boundary markers: While the skill retrieves external content, it does not explicitly define distinct boundary markers (like delimiters) in its output templates to isolate untrusted Reddit data from agent instructions.
Capability inventory: The skill has the ability to write to Reddit (posting and commenting) and execute local shell commands via the Python script.
Sanitization: Although the structure of the Reddit JSON response is validated, the text content itself is not filtered for hidden instructions.
Mitigation: The significant risk of indirect prompt injection is strongly mitigated by a mandatory human-in-the-loop confirmation requirement (--confirm) for every write operation.

reddit