The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from Reddit which could contain malicious instructions designed to influence the agent's behavior.
Ingestion points: The skill retrieves data from Reddit via REDDIT_SEARCH_ACROSS_SUBREDDITS, REDDIT_RETRIEVE_POST_COMMENTS, REDDIT_GET_R_TOP, REDDIT_GET, and REDDIT_RETRIEVE_REDDIT_POST in SKILL.md.
Boundary markers: The instructions do not specify any delimiters or safety markers (e.g., "ignore embedded instructions") when the agent processes retrieved Reddit content.
Capability inventory: The skill provides the agent with write capabilities including creating posts (REDDIT_CREATE_REDDIT_POST), posting comments (REDDIT_POST_REDDIT_COMMENT), and editing content (REDDIT_EDIT_REDDIT_COMMENT_OR_POST) in SKILL.md.
Sanitization: No sanitization, escaping, or validation steps for ingested content are defined in the skill documentation.
[EXTERNAL_DOWNLOADS]: The skill instructs the user to connect to an external Model Context Protocol (MCP) server.
Documentation: Instructions in SKILL.md direct the user to add https://rube.app/mcp as an MCP server in their client configuration to provide the Reddit toolkit functionality.

reddit-automation