The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit, creating a potential attack surface where external content could influence agent behavior.
Ingestion points: Tools such as REDDIT_SEARCH_ACROSS_SUBREDDITS, REDDIT_RETRIEVE_POST_COMMENTS, and REDDIT_RETRIEVE_REDDIT_POST ingest text directly from a public social media platform (SKILL.md).
Boundary markers: The skill instructions do not specify the use of delimiters or clear boundaries to separate ingested Reddit content from the agent's system instructions.
Capability inventory: The skill possesses significant write capabilities, including REDDIT_CREATE_REDDIT_POST, REDDIT_POST_REDDIT_COMMENT, REDDIT_EDIT_REDDIT_COMMENT_OR_POST, and REDDIT_DELETE_REDDIT_POST (SKILL.md).
Sanitization: There is no documentation regarding the sanitization or filtering of the external data before it is presented to the agent for processing.
[EXTERNAL_DOWNLOADS]: The skill references external infrastructure and documentation for operation.
Evidence: The setup instructions direct users to add https://rube.app/mcp as an MCP server and reference documentation at https://composio.dev/toolkits/reddit (SKILL.md). These are established services within the AI agent ecosystem.

reddit-automation