reddit-competitor-analysis-api-skill
v1.0.0This skill helps users extract structured data from Reddit posts and comments via BrowserAct API. Agent should proactively apply this skill when users expres...
⭐ 0· 95·0 current·0 all-time
bybrowser-act@browseract-ai
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the code and runtime instructions: the script calls BrowserAct endpoints to run a workflow template and poll for results. Requested artifact (python3) and the required env var (BROWSERACT_API_KEY) are appropriate for this purpose.
Instruction Scope
SKILL.md instructs the agent to check for BROWSERACT_API_KEY and to run the included Python script, and to monitor its logs. The script only reads the declared env var and command-line arguments, performs HTTP calls to api.browseract.com, polls status, and prints results. It does not access unrelated files, other env vars, or system configuration.
Install Mechanism
This is an instruction-only skill (no install spec), but it includes an executable Python script. The script depends on the 'requests' library which is not declared in metadata; the registry only lists python3. No network download/install occurs from untrusted URLs. Recommend ensuring the runtime environment has the required Python packages installed before running.
Credentials
Only one environment variable is required: BROWSERACT_API_KEY, which is directly used to authorize requests to BrowserAct. No unrelated secrets or credentials are requested.
Persistence & Privilege
The skill does not request 'always: true' or any elevated platform privileges, nor does it attempt to modify other skills or system-wide configuration. It runs a one-off script and returns outputs.
Assessment
This skill appears to do what it claims: it sends requests to BrowserAct using the BROWSERACT_API_KEY and returns extracted Reddit data. Before installing or running: 1) Verify you trust BrowserAct (data you send and results returned may include user-generated content and potential PII). 2) Ensure the runtime has Python 3 and the 'requests' package installed (the script requires it but the metadata doesn't list Python packages). 3) Limit the API key scope and rotate it if possible; do not supply long-lived superuser credentials. 4) Consider network egress policies (the script makes outbound calls to api.browseract.com). 5) If you need a higher assurance level, inspect the BrowserAct template ID and/or test with a scoped API key and non-sensitive queries first.Like a lobster shell, security has layers — review code before you run it.
latestvk97emk98ynh8eh6dz8tvj242p1837pxm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🌐 Clawdis
Binspython3
EnvBROWSERACT_API_KEY
