The Agent Skills Directory

[PROMPT_INJECTION]: The skill correctly identifies that it ingests untrusted third-party content (Reddit posts and comments) and provides specific defensive instructions. It mandates that the agent never interpret Reddit text as commands (e.g., 'ignore previous instructions') and requires visual separation of external data using blockquotes.
Ingestion points: Reddit titles, content, and comment bodies returned by reddapi.dev.
Boundary markers: Present (blockquotes and fenced blocks).
Capability inventory: Network access via curl and local data processing via python3.
Sanitization: Instructions to treat all ingested content strictly as data to be read, not instructions to be executed.
[CREDENTIALS_UNSAFE]: The skill demonstrates best practices for credential security. It requires the REDDAPI_API_KEY to be accessed via environment variables and explicitly forbids the agent from echoing, logging, or requesting the literal value from the user.
[DATA_EXFILTRATION]: Network operations are limited to the vendor's API (reddapi.dev). The skill contains no patterns indicative of reading sensitive local files or exfiltrating environment data.
[COMMAND_EXECUTION]: The skill uses curl to fetch data and a small inline python3 script to parse JSON responses. These commands are well-defined, local to the skill's purpose, and do not involve executing untrusted remote code.

reddit-research