ClawHub

RedditRank

v1.0.2

Find Reddit threads ranking on Google Page 1 for your keywords. AI drafts contextual replies that naturally mention your product. Copy, paste, post. Free org...

⭐ 0· 104·0 current·0 all-time
by@aces1up
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (find Google-ranked Reddit threads and draft replies) match the code and API calls. The files implement a TUI that calls discover, draft, usage, and auth endpoints at the declared base URL. Required binary (curl) and required env var (REDDITRANK_API_KEY) are appropriate for this purpose.
ℹ
Instruction Scope
SKILL.md instructs users to run setup.sh to register and obtain an API key; setup.sh then sends the user email to the service and writes the returned api_key to ~/.redditrank/config.json. This behavior is expected for a registration flow, but SKILL.md's language ('stores your API key in your OpenClaw config') is slightly imprecise — the code actually writes to a local ~/.redditrank config file. The runtime instructions do not attempt to read unrelated credentials or system files beyond the created config and standard env vars.
ℹ
Install Mechanism
There is no formal install spec in the registry, but the bundle includes a setup.sh that creates a local virtualenv and pip-installs requirements.txt (textual, httpx, pyperclip). This is a typical pattern for Python CLI tools; it will write a .venv directory and ~/.redditrank/config.json. The install uses PyPI packages (requirements.txt) — expected but moderate-risk compared to a pure instruction-only skill because code is written to disk and third-party packages are installed.
✓
Credentials
Only REDDITRANK_API_KEY is required as a credential (declared as primaryEnv). The code optionally reads REDDITRANK_API_BASE for a custom API base but that is optional and not required. No unrelated tokens (AWS, GitHub, etc.) are requested. The setup flow asks for an email to register (expected for API key issuance).
ℹ
Persistence & Privilege
The skill persists a user API key to ~/.redditrank/config.json and creates a .venv in the skill directory during setup. It does not request always:true or modify other skills or system-wide configs. Persisting a credential and writing a venv are normal for a local CLI tool; users should be aware of the file paths used.
Assessment
What to consider before installing: - This is a local Python TUI that talks to an external service at https://clawagents.dev/reddit-rank/v1. The setup script will ask for your email, POST it to that service to get a verification code, and then save the returned API key to ~/.redditrank/config.json (or you can set REDDITRANK_API_KEY in your environment). If you don't trust that domain or service, do not register. - setup.sh will create a .venv in the skill directory and pip-install packages from PyPI (textual, httpx, pyperclip). Review requirements.txt and be comfortable with those packages. - The tool's explicit purpose is to find Reddit threads and generate 'stealth' marketing replies; that has ethical/platform-policy implications (may violate Reddit rules). Use responsibly. - If you want to minimize persistence, set REDDITRANK_API_KEY as an environment variable instead of running the registration flow, and avoid running the setup script that writes files. - If you need higher assurance, review the remote API’s privacy/terms and the server at clawagents.dev before providing your email or using the API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk977jy0cyyng35m99efnbb45ds8341y4

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
Binscurl
EnvREDDITRANK_API_KEY
Primary envREDDITRANK_API_KEY

Comments