The Agent Skills Directory

[INDIRECT_PROMPT_INJECTION]: The skill fetches content directly from Reddit posts, which acts as an untrusted data source and creates a potential surface for indirect prompt injection.
Ingestion points: Untrusted content from Reddit post titles and body snippets is retrieved in SKILL.md (Step 3).
Boundary markers: There are no explicit delimiters or instructions to the LLM to ignore potentially malicious commands embedded in the Reddit data when it is passed to the Gemini API for scoring and drafting.
Capability inventory: The skill utilizes shell capabilities including curl for network operations, python3 for data processing, and mkdir/cat for file system writes (SKILL.md Steps 3, 4, 5, and 7).
Sanitization: The skill does not perform sanitization, filtering, or escaping on the external Reddit content before interpolating it into the AI prompts.
[COMMAND_EXECUTION]: The skill instructions direct the agent to execute several shell commands (curl, python3, cat) to facilitate its core functionality. These commands are used to interact with the Reddit and Google Gemini APIs and to process the resulting data. While these actions are aligned with the skill's purpose, they involve handling data fetched from external, untrusted sources.

reddit-icp-monitor