The Agent Skills Directory

[SAFE]: The scripts/setup script modifies shell profiles to add the tool's installation directory to the system PATH. This is a standard and expected configuration for local command-line utilities.- [PROMPT_INJECTION]: The skill processes content from Reddit, which is an external user-controlled source. This creates a surface for indirect prompt injection if the agent interprets text within the search results as instructions.
Ingestion points: scripts/rsearch (fetches from reddit.com)
Boundary markers: Absent; results are provided as plain text or JSON.
Capability inventory: Browser automation via CDP, local tool symlinking via scripts/setup.
Sanitization: Absent; content is returned as-is after decoding HTML entities.- [COMMAND_EXECUTION]: The skill uses CDP to execute JavaScript code in a browser context for the purpose of scraping Reddit. The query parameters are safely handled using stringification and encoding to prevent injection into the generated script.- [DATA_EXFILTRATION]: The search functionality utilizes the browser's current login session for Reddit to provide results. While this involves personal data access, the results are only provided to the agent as requested and no data is sent to unauthorized external domains.

rsearch