The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes curl to interact with the reddapi.dev API endpoints. It also demonstrates using a python3 one-liner to parse and format JSON response data locally for the user.
[INDIRECT_PROMPT_INJECTION]: The skill handles untrusted third-party content from Reddit search results, creating a potential surface for indirect prompt injection. It proactively addresses this with high-quality mitigations:
Ingestion points: Untrusted data enters the agent context via the title, content, and comment fields of Reddit posts returned by the API (SKILL.md).
Boundary markers: The agent is explicitly instructed to visually separate result content from its own reasoning using blockquotes or fenced code blocks to prevent context confusion.
Capability inventory: The skill has access to tool-based HTTP requests via curl and local data processing via python3 (SKILL.md).
Sanitization: Explicit instructions (SKILL.md) prohibit interpreting result text as commands or using them to trigger tool calls, file writes, or follow-up requests.
[PROMPT_INJECTION]: The skill contains phrases like "ignore previous instructions," but these are used in a defensive context to teach the agent to disregard malicious prompts embedded in Reddit user content. Additionally, the instruction to never repeat API keys is a standard safety measure for credential protection and not an attempt at malicious concealment.

reddapi