The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill fetches an additional instruction file (SKILL.md) from the vendor's official GitHub repository (XPOZpublic) to facilitate AI answer tracing.
[COMMAND_EXECUTION]: The skill utilizes subprocess.run to configure the mcporter tool, passing authentication tokens as headers during the setup process. This is used for local environment configuration rather than arbitrary command execution.
[DYNAMIC_EXECUTION]: The authentication flow involves generating and executing Python scripts to handle OAuth registration, state management, and token exchange. These scripts use standard libraries to manage session data in the local cache directory.
[REMOTE_CODE_EXECUTION]: A pattern was identified where data (an access token) is retrieved from a remote OAuth endpoint (mcp.xpoz.ai/oauth/token) and subsequently used in a subprocess command. This is used for tool configuration and is tied to the vendor's own infrastructure.
[INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from Reddit and external AI answers, creating an indirect prompt injection surface.
Ingestion points: Data enters the context via Reddit thread fetching (Step 3) and AI citation tracing (Step 2).
Boundary markers: The skill contains explicit rules stating 'A human writes and posts everything' and 'Never post, comment, or message anyone,' which limits the agent's autonomy and serves as a safety boundary.
Capability inventory: The skill uses subprocess.run and urllib.request for setup and data retrieval, and performs local file writes for session state management.
Sanitization: No specific input sanitization or escaping mechanisms for the processed data are described in the instructions.

geo-reddit