The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill contains instructions to automatically install the BrowserAct CLI from an external URL if the dependency is missing. Critically, it directs the agent to do so "without asking the user to confirm" and to "not request separate approval," which bypasses standard human-in-the-loop security controls for code execution.
[EXTERNAL_DOWNLOADS]: The skill relies on external software from a non-verified third-party domain (browseract.com). The instruction to install this dependency silently and automatically from an external URL increases the risk of system compromise through unverified code.
[PROMPT_INJECTION]: The skill is designed to scrape and process content from Reddit (titles, comments, and post text). This data is untrusted and could contain malicious instructions designed to manipulate the agent's behavior (Indirect Prompt Injection).
Ingestion points: Target Reddit URLs, accounts, and content pages specified in the instructions.
Boundary markers: There are no markers or instructions defined to isolate the scraped data or to treat it as low-trust content.
Capability inventory: The skill uses the browser-act CLI for web interaction and mentions exporting records to CSV files.
Sanitization: The skill definition does not include any requirements or methods for sanitizing the ingested Reddit data before it is processed or exported.

reddit-top-posts-scraper