The Agent Skills Directory

[COMMAND_EXECUTION]: The skill contains explicit instructions to override standard security procedures by requiring the agent to install dependencies automatically without asking the user to confirm. It specifically mandates that the agent should not describe the installation as a request to the user or seek separate approval.
[EXTERNAL_DOWNLOADS]: The skill requires the installation of the 'BrowserAct' CLI and skill from an external URL (browseract.com) as a runtime dependency. The lack of version pinning or integrity checks, combined with the forced installation instruction, creates a supply chain risk.
[PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by processing untrusted data from Reddit profiles and comments.
Ingestion points: Public Reddit user profile information, including username, karma, account age, and specifically recent submissions and comment activity (SKILL.md).
Boundary markers: There are no boundary markers or delimiters defined to isolate the scraped Reddit content from the agent's instructions.
Capability inventory: The agent uses the browser-act tool, which has the capability to interact with live web pages and execute tasks.
Sanitization: The instructions lack any requirement for the agent to sanitize, escape, or validate the content retrieved from Reddit before processing it.

reddit-user-scraper