IceCube Reddit Scout

🧊 IceCube Reddit Scout — Free Reddit keyword monitoring integrated with your AI agent. No SaaS subscription. No cloud dependency. Track mentions, validate i...

Security Scan

The skill's goal (Reddit keyword monitoring) is plausible, but the instructions, shipped scripts, and declared requirements contain multiple inconsistencies and missing secrets/config declarations that should be resolved before trusting it.

Purpose & Capability

Name/description and included scripts align with Reddit monitoring and only require curl, which is reasonable. However the SKILL.md repeatedly states 'No rate limits' / 'No cloud dependency' while also saying anonymous API access is blocked and recommending OAuth; the provided scripts still call the anonymous reddit.com search endpoints. The skill also references Telegram alerts, email parsing, and integrations with other IceCube skills but does not declare any environment variables or credentials for those services. These mismatches suggest design sloppiness or incomplete configuration.

Instruction Scope

SKILL.md instructs the agent to 'read these emails and extract context' and to send Telegram notifications, but gives no mechanism or declared env vars for accessing email or Telegram. It tells the agent to store OAuth client_id/client_secret in a config YAML (which is a secret) but does not mention secure storage. The scripts write logs to $HOME/.openclaw/workspace which is reasonable, but the runtime instructions and code diverge (doc says OAuth required, scripts use anonymous endpoints), creating scope and operational ambiguity.

Install Mechanism

No install spec (instruction-only) — low install risk. Two bash scripts are included (monitor.sh and scripts/monitor.sh) that will be executed by the agent or by the user; they only call curl and optionally jq. The skill does not declare jq as a required binary even though the scripts use jq when available (they degrade gracefully if missing). No external downloads or obscure URLs are involved.

Credentials

Registry metadata lists no required env vars, but SKILL.md instructs storing Reddit OAuth client_id and client_secret in config/reddit-scout.yaml and mentions Telegram notifications (which would normally require a TELEGRAM_TOKEN). Secrets required by operation are not declared in requires.env or primaryEnv. The guidance to store client_secret in plain YAML without recommending secret-store usage is a risk/oversight.

Persistence & Privilege

always:false (default) and agent-invocable:true — appropriate for this kind of skill. The scripts only create and write files under $HOME/.openclaw/workspace, not system-wide config, and do not modify other skills' configs. No elevated persistence or system privileges are requested.

What to consider before installing

This skill appears to be a plausible Reddit monitor but contains several inconsistencies you should resolve before installing or running it: 1) SKILL.md says anonymous API access is blocked and recommends OAuth, yet the included scripts still call Reddit anonymously — verify the runtime actually uses OAuth if Reddit requires it. 2) The skill references reading email alerts and sending Telegram messages but does not declare or describe how to provide email access or Telegram credentials; do not store client_secret or tokens in plaintext if you can avoid it — use the platform's secret storage. 3) The scripts write to $HOME/.openclaw/workspace; review those files before running and consider running in an isolated account/container. 4) Confirm you will not allow the agent to auto-post replies without human approval (the skill mentions drafting replies). 5) If you plan to use polling, be mindful of Reddit rate limits and terms of service. If the author can provide a revised SKILL.md that (a) declares required env vars (OAuth, Telegram token, etc.), (b) replaces anonymous API calls with proper OAuth flow, and (c) recommends secure secret storage, the inconsistencies would be addressed and confidence would increase.

Free Reddit monitoring. Integrated with your agent.

GummySearch is dead. F5Bot solves 10% of the workflow. Paid alternatives cost $50-200/month.

IceCube Reddit Scout gives you the other 90% for free.

What This Skill Does

1. Keyword Monitoring

• Track keywords across any subreddit
• Get alerts when mentions appear
• No subscription, no rate limits

2. Context Extraction

• Don't just get alerts — get context
• Auto-extract: thread sentiment, user intent, engagement signals
• Filter noise automatically

3. Lead Identification

• Detect buying intent signals
• "I wish there was a tool for..."
• "Anyone know how to..."
• "Looking for recommendations..."

4. Opportunity Mining

• Find pain points in discussions
• Validate product ideas
• Track competitor mentions

Setup

1. Configure Keywords

Create config/reddit-scout.yaml:

keywords:
  - "openclaw"
  - "AI agent"
  - "memory system"
  - "context window"

subreddits:
  - "r/indiehackers"
  - "r/SaaS"
  - "r/startups"
  - "r/artificial"

filters:
  intent_signals:
    - "wish"
    - "need"
    - "looking for"
    - "recommendations"
    - "alternatives"
  noise_filter:
    - exclude_self_mentions: true
    - min_score: 5
    - exclude_downvoted: true

alerts:
  channels:
    - telegram
    - memory_log
  frequency: 1h

2. Reddit Native Alerts (Free)

Reddit now has built-in keyword alerts. Use them:

1. Go to Reddit settings → Notifications
2. Enable "keyword alerts"
3. Add your keywords
4. Get email notifications

IceCube Reddit Scout reads these emails and extracts context.

3. Polling Mode (Alternative)

If you don't want Reddit alerts:

mode: polling
poll_interval: 30m

Uses Reddit search API to check for new mentions.

Commands

Add Keyword

curl -s "https://www.reddit.com/search.json?q=openclaw&sort=new&limit=10"

Monitor Subreddit

curl -s "https://www.reddit.com/r/indiehackers/search.json?q=memory+system&sort=new&limit=25"

Check Trends

curl -s "https://www.reddit.com/r/indiehackers/hot.json?limit=50"

Workflow Integration

Step 1: Detection

Agent polls Reddit every 30 minutes (cron job or heartbeat).

Step 2: Extraction

When keyword found:

• Extract thread title, content, score, comments
• Detect intent signal (wish/need/looking_for)
• Calculate relevance score

Step 3: Alerting

If relevance > threshold:

• Write to memory/reddit-mentions/YYYY-MM-DD.md
• Send Telegram notification (if configured)
• Add to unclosed_work.yaml if action needed

Step 4: Response

Agent can:

• Log for later analysis
• Draft reply (human approves)
• Track competitor activity
• Capture pain point for product ideas

Output Format

memory/reddit-mentions/2026-03-31.md:

# Reddit Mentions — 2026-03-31

## RM-001 (14:32)
- Subreddit: r/indiehackers
- Thread: "I wish there was a tool that could remember my agent context"
- Intent: wish (high)
- Score: 42
- Sentiment: positive
- Opportunity: IceCube Memory candidate user
- Link: https://reddit.com/r/indiehackers/comments/xxx
- Action: Log for marketing outreach

## RM-002 (15:15)
- Subreddit: r/SaaS
- Thread: "GummySearch alternatives that don't cost $200/month"
- Intent: looking_for_alternatives (high)
- Score: 87
- Sentiment: frustrated
- Opportunity: IceCube Reddit Scout pitch
- Link: https://reddit.com/r/SaaS/comments/yyy
- Action: Draft reply for human approval

Comparison

Feature	GummySearch	F5Bot	Paid Alternatives	IceCube Scout
Price	Dead	Free	$50-200/mo	Free
Cloud	Yes	Yes	Yes	No
Context extraction	Manual	Manual	Some	Auto
Intent detection	Manual	No	Yes	Auto
Agent integration	No	No	No	Yes
Response drafting	No	No	Some	Yes
Memory logging	No	No	No	Yes

Use Cases

1. Brand Monitoring

Track when people mention your product/project.

2. Lead Generation

Find people asking for solutions you offer.

3. Idea Validation

Capture pain points for product development.

4. Competitor Tracking

Monitor competitor mentions and sentiment.

5. Trend Detection

Spot emerging topics in your niche.

Integration with IceCube Suite

icecube-memory: Mentions logged to memory structure icecube-heartbeat: Polling triggered during heartbeat icecube-evolution: Pain points feed improvement queue

⚠️ Important: Reddit API Access Required (2026)

As of 2026, Reddit has blocked all anonymous API access. You MUST use one of these methods:

Method 1: Reddit OAuth (Recommended)

1. Create a Reddit app at https://www.reddit.com/prefs/apps
2. Configure OAuth credentials in config/reddit-scout.yaml
3. Get 60 requests/min with proper authentication

oauth:
  client_id: YOUR_CLIENT_ID
  client_secret: YOUR_CLIENT_SECRET
  user_agent: "IceCube-Reddit-Scout/1.0 by YOUR_REDDIT_USERNAME"

Method 2: Browser Automation (peekaboo skill)

• Use the peekaboo skill to access Reddit via browser
• Slower but no API limits
• Works for logged-in Reddit users

Method 3: F5Bot + Local Processing

• Use F5Bot for keyword alerts (free)
• Process alerts locally with IceCube Scout
• Combines free alerting with agent integration

Limitations

• Reddit API requires OAuth (no anonymous access)
• Polling mode not real-time (30 min intervals)
• No DM automation (Reddit policy)
• Reddit may still block even OAuth requests if rate limits exceeded

Advanced: OAuth Integration

For higher rate limits:

1. Create Reddit app at https://www.reddit.com/prefs/apps
2. Configure OAuth credentials
3. Get 60 requests/min

oauth:
  client_id: YOUR_CLIENT_ID
  client_secret: YOUR_CLIENT_SECRET
  redirect_uri: http://localhost:8080

License

MIT — Use freely.

---

GummySearch is dead. F5Bot is 10%. IceCube Scout is the 90%.