The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill retrieves untrusted data from Reddit (posts, comments, and inbox messages) which is then processed by the AI agent. This creates a potential surface for indirect prompt injection where malicious instructions embedded in Reddit content could attempt to influence the agent's actions.
Ingestion points: Data is ingested via reddit_skill.py in methods such as cmd_frontpage, cmd_subreddit, cmd_search, and cmd_inbox.
Boundary markers: The skill does not currently implement specific delimiters or 'ignore' instructions for the data returned from Reddit to the agent.
Capability inventory: The skill has capabilities to write data to Reddit, including posting (cmd_post), commenting (cmd_comment), and voting (cmd_vote), which could be target actions for an injection attack.
Sanitization: The skill returns raw text from Reddit (up to 500 characters per item) without sanitizing or filtering for potential prompt injection patterns.

reddit-skill