The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The archive command in scripts/rdtx.mjs exports the user's active Reddit session cookies, including reddit_session and token_v2, to a plaintext Netscape-formatted file at ~/.rdtx/cookies.txt. Storing sensitive authentication tokens in a plaintext file on disk is an unsafe credential management practice.\n- [COMMAND_EXECUTION]: The skill extensively uses node:child_process to execute external commands, including spawning Google Chrome with remote debugging enabled and invoking yt-dlp for video processing. It also relies on the agent-browser CLI for browser automation tasks.\n- [REMOTE_CODE_EXECUTION]: The scripts/verify-synthetic.mjs utility dynamically generates and writes JavaScript files (network-guard.cjs and agent-browser-guard.mjs) to a temporary directory at runtime, subsequently executing them via the Node.js binary. This pattern of generating and running code dynamically is a high-risk behavior.\n- [DATA_EXFILTRATION]: Through the archive command, the skill programmatically retrieves posts, comments, and media from Reddit. Additionally, the scripts/cdp-upload.mjs and scripts/image-post.mjs scripts use the DOM.setFileInputFiles CDP command to programmatically upload local files to Reddit. These capabilities provide a surface for moving local data to an external platform.\n- [PROMPT_INJECTION]: The skill ingests untrusted data from Reddit posts and comments via commands like read and voice. There are no explicit boundary markers or sanitization logic to prevent the agent from following instructions embedded in this external data. This capability represents a surface for indirect prompt injection.\n- [EXTERNAL_DOWNLOADS]: The skill uses yt-dlp to download video content and fetch to retrieve images from i.redd.it and preview.redd.it. While these are targeted at Reddit's own CDN, the infrastructure allowing for remote content retrieval should be noted.

reddit-seo