The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted third-party content from Reddit, creating a surface for potential indirect prompt injection attacks where instructions embedded in comments could influence the agent's output.
Ingestion points: As defined in SKILL.md, the agent retrieves data from reddit/posts/{id}/comments and reddit/users/{username}/comments.
Boundary markers: The instructions do not specify the use of delimiters or clear markers to separate untrusted Reddit content from the system prompt.
Capability inventory: The skill's capabilities are limited to data analysis and drafting text; it explicitly forbids the agent from performing automated actions such as posting, voting, or sending DMs.
Sanitization: There is no evidence of content sanitization or instruction-filtering for the data fetched from Reddit.
[EXTERNAL_DOWNLOADS]: The skill refers to external services and packages maintained by the vendor for its core functionality.
Evidence: The README.md instructs users to add the UnifAPI MCP server at https://mcp.unifapi.com and install components via npx skills add unifapi-agent/agents.
Context: These resources belong to the author ('unifapi-agent') and are used as legitimate data access points for the skill's research purpose.

reddit-thread-fit-check