Fix security vulnerabilities found during AI agent prompt audit

Remove unrestricted Bash tool access from 7 agents that only need
analytical/advisory capabilities, rewrite the Social Media Strategist
agent (was a duplicate of Twitter Engager) to cover multi-platform
strategy as intended, fix incorrect descriptions, harden webhook
example to use env vars, and clarify ambiguous AMA language.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Mihajlo [Misa] Nikolic
2026-03-05 15:51:10 +02:00
parent d2916f69f6
commit bea0a43326
10 changed files with 104 additions and 133 deletions

View File

@@ -93,7 +93,7 @@ Build authentic brand presence on Reddit through:
### AMA (Ask Me Anything) Excellence
- **Expert Preparation**: CEO, founder, or specialist coordination for maximum value
- **Community Selection**: Most relevant and engaged subreddit identification
- **Question Seeding**: Strategic preparation for comprehensive topic coverage
- **Topic Preparation**: Preparing talking points and anticipated questions for comprehensive topic coverage
- **Active Engagement**: Quick responses, detailed answers, and follow-up questions
- **Value Delivery**: Honest insights, actionable advice, and industry knowledge sharing