The Agent Skills Directory

[COMMAND_EXECUTION]: The login command in scripts/reddit.mjs constructs a shell command to open the browser using child_process.exec. The REDDIT_CLIENT_ID environment variable is interpolated into the URL without sanitization or escaping. If this environment variable is maliciously populated with shell metacharacters (e.g., via quotes and command separators), it can lead to arbitrary command execution on the host system.\n- [DATA_EXFILTRATION]: The skill processes sensitive Reddit credentials (client ID, secret, username, password) and stores OAuth access and refresh tokens in a plaintext file at ~/.reddit-token.json. This file is located in the user's home directory and represents a sensitive asset that could be targeted for credential theft.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its interaction with the Reddit API.\n
Ingestion points: Untrusted content is ingested from Reddit posts, search results, and comments via scripts/reddit.mjs.\n
Boundary markers: No delimiters or warnings are used to isolate Reddit content from the agent's core instructions.\n
Capability inventory: The skill can perform network requests, write to the filesystem, and execute subprocesses.\n
Sanitization: Reddit content is passed directly to the agent without any filtering or validation of the text content.

reddit