The Agent Skills Directory

[SAFE]: The skill implements robust security controls for handling Reddit API credentials. Secrets are managed through .env files, and the skill specifically sets restrictive file permissions (umask 077) for the local token cache to prevent unauthorized access.
[SAFE]: Write operations (posting, replying, subscribing) are protected by a dual-gate mechanism: they require both an environment variable (REDDIT_ENABLE_WRITE=1) and an explicit command-line flag (--confirm). This prevents accidental or automated misuse of write capabilities.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from Reddit posts and comments. While it parses this data securely using standard JSON libraries and truncates the output, the presence of raw user-generated text in the agent's context poses a standard risk of indirect prompt injection if the agent attempts to follow instructions found within Reddit content.
Ingestion points: reddit_get calls in scripts/submission.sh, scripts/search.sh, and scripts/user_comments.sh.
Boundary markers: Output is labeled (e.g., 'Post:', 'Body:'), but no specific 'ignore instructions' delimiters are wrapped around Reddit content.
Capability inventory: The skill possesses the ability to write to Reddit (post, reply), which could be a target for injection attacks.
Sanitization: Content is properly parsed from JSON and truncated to limit context window impact, though text is not sanitized for natural language instructions.
[SAFE]: Network operations are restricted to Reddit's official API domains (oauth.reddit.com and www.reddit.com). No suspicious third-party domains or piped shell executions (e.g., curl | bash) were found.

reddit-skill