The Agent Skills Directory

[PROMPT_INJECTION]: The skill retrieves and processes untrusted content from public Reddit posts and comments. This creates a surface for indirect prompt injection, where malicious instructions embedded in Reddit data could potentially influence the agent's behavior. While the script outputs data in structured JSON, the instructions lack explicit boundary markers or safety guidelines to ignore embedded instructions in the fetched data.
[COMMAND_EXECUTION]: In scripts/reddit.mjs, the login function uses child_process.exec to launch the system's default browser for OAuth authorization. The command string is constructed using the REDDIT_CLIENT_ID environment variable without sufficient sanitization. This presents a minor risk of local command injection if a user or malicious process provides a crafted client ID containing shell metacharacters.
[DATA_EXFILTRATION]: The skill handles sensitive credentials including Client IDs, Secrets, and user passwords via environment variables. It persists an OAuth refresh token in the user's home directory at ~/.reddit-token.json. These credentials and tokens are transmitted exclusively to official Reddit domains (www.reddit.com and oauth.reddit.com) as part of the intended OAuth flow.

reddit