The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The script scripts/search_reddit.py handles sensitive API tokens (APIFY_API_TOKEN or GOOSEWORKS_API_KEY) by reading them from environment variables. These tokens are transmitted as query parameters in HTTP requests to api.apify.com or api.gooseworks.ai. While this is a common pattern for some APIs, it is a minor concern as tokens in URLs may be recorded in server or proxy logs.
[EXTERNAL_DOWNLOADS]: The skill makes network requests to api.apify.com (a well-known web scraping service) and api.gooseworks.ai (the author's own API proxy). These connections are intended and necessary for the skill's primary functionality of retrieving Reddit data.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from Reddit posts and comments.
Ingestion points: Untrusted data enters the agent context via the Apify dataset items endpoint in scripts/search_reddit.py.
Boundary markers: No boundary markers or specific warnings are used to encapsulate the scraped content.
Capability inventory: The script performs network requests and prints output to the console.
Sanitization: No sanitization is performed on the scraped content (title and body). However, the risk is low because the script only filters and prints the data, rather than using it to dynamically construct commands or sensitive API calls.

reddit-post-finder