The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from an external source (Reddit).
Ingestion points: Untrusted content is retrieved from Reddit through various actions like reddit_get, reddit_get_controversial_posts, reddit_get_r_top, and reddit_get_random (SKILL.md).
Boundary markers: The instructions advise the agent to "confirm with the user before any write," but there are no technical delimiters or explicit instructions provided to the agent to ignore embedded commands within the fetched content.
Capability inventory: The agent has the ability to perform write operations (posting, editing, deleting) and execute shell commands via the ClawLink CLI (npx @useclawlink/cli run).
Sanitization: There is no evidence of sanitization or filtering of the retrieved Reddit content before it is processed by the agent.
[DATA_EXFILTRATION]: The skill documents that authentication credentials for the service are stored in a local JSON file at ~/.clawlink/credentials.json (SKILL.md).
[EXTERNAL_DOWNLOADS]: The setup instructions require the use of npx to download and execute the @useclawlink/cli package from the NPM registry (SKILL.md).
[COMMAND_EXECUTION]: The skill relies on executing shell commands via the ClawLink CLI for all interactions with the Reddit API, including logging in, connecting accounts, and running actions.

reddit