The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill ingests and processes data from external public sources (Reddit posts, comments, and profiles), which represents an attack surface for indirect prompt injection.
Ingestion points: External data is retrieved via the postplus research run command and stored in local JSON files (e.g., result.json or files within the .postplus/ directory) as described in SKILL.md and references/shared-contract.md.
Boundary markers: The instructions lack specific guidance for using delimiters or "ignore embedded instructions" warnings when the agent processes or presents the collected content.
Capability inventory: The skill utilizes the postplus CLI tool to execute research tasks, including keyword searches, thread comment retrieval, and subreddit data collection.
Sanitization: While references/result-shapes.md provides strict instructions on which fields to present to the user (e.g., body, author, created time), it does not explicitly require sanitization of the text content to mitigate potential injection attempts embedded within the Reddit data.
[COMMAND_EXECUTION]: The skill utilizes a specialized CLI tool (postplus) to perform its research functions. These commands are used within a structured protocol to interact with the platform's research services and manage credit-bounded operations, following the vendor's intended design.

reddit-search