The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from Reddit, creating a vulnerability surface where attackers could attempt to influence the agent's moderation decisions through carefully crafted content.
Ingestion points: The reddit-mod.py script fetches submissions, comments, and report reasons from the Reddit API (subcommands: queue, reports, scan).
Boundary markers: The prompt template in references/classification-prompt.md wraps raw Reddit data in <untrusted-content> delimiters.
Capability inventory: The skill possesses significant capabilities, including the ability to approve, remove, lock, and ban on the Reddit platform.
Sanitization: The wrap_untrusted function in scripts/reddit-mod.py prevents tag-based escaping by stripping existing delimiters from user data. The classification prompt contains explicit security instructions to treat text resembling system commands as a signal for manipulation rather than directives to obey.
[COMMAND_EXECUTION]: The scripts/reddit-automod-cron.sh script facilitates automated moderation by running the claude CLI with --permission-mode auto. This configuration allows the agent to execute moderation actions based on its classification of untrusted data without per-action human approval. While mitigated by confidence thresholds and safety rules (e.g., skipping auto-bans), it represents a fully autonomous loop involving untrusted content.

reddit-moderate