The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill connects to the UnifAPI Model Context Protocol (MCP) server at mcp.unifapi.com to retrieve live data from Reddit. This is the primary data source and is hosted on the vendor's infrastructure.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted content from Reddit posts and comments.
Ingestion points: Data enters the agent context through Reddit posts, comments, subreddit rules, and user profiles fetched via the unifapi tool.
Boundary markers: The instructions do not define specific delimiters or warnings to the agent to ignore instructions embedded within the Reddit content.
Capability inventory: The skill performs file read operations on local context files and network retrieval via UnifAPI tools; it does not possess write or execution capabilities ('eyes, not hands').
Sanitization: There is no explicit logic described for sanitizing or escaping the content retrieved from external Reddit sources before processing.
[DATA_EXFILTRATION]: The skill identifies and reads local context files, specifically .agents/product-marketing.md or .claude/product-marketing.md, to gather initial niche or product information. While these are context files for the agent rather than system secrets, it represents an automated read of local workspace data.

reddit-community-research