The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes external data from Reddit posts which could contain adversarial instructions. However, the implementation is resilient because it focuses on data retrieval and provides the agent with instructions to return the data in a validated JSON format or a high-level summary. The ingestion point is the API response from ai-factory.frevana.com, which is then strictly validated for JSON integrity using a Python helper before being exposed to the agent. No direct execution of the external content occurs.
[COMMAND_EXECUTION]: The shell script scripts/search_reddit_mentions.sh avoids injection vulnerabilities by using a restrictive regular expression (^https?://) to validate each target URL before processing. It also utilizes environment variables to pass data to Python sub-processes, preventing shell interpolation attacks that could occur with direct string concatenation.
[DATA_EXFILTRATION]: The skill requires a FREVANA_TOKEN. The script is designed to handle this token securely by reading it from the environment or a specific CLI flag, and it contains explicit instructions and logic to ensure the token is never echoed back to the user or logs.
[DYNAMIC_EXECUTION]: The script uses python3 - to execute small, embedded blocks of Python code. This is used exclusively for safe JSON creation and validation, leveraging standard libraries to ensure the data exchanged between the shell and the API remains structured and safe.

reddit-url-mentions