Reddit Insights

PassAudited by ClawScan on May 8, 2026.

Overview

This looks like a legitimate Reddit search helper, but it uses a paid reddapi.dev API key and sends search queries to that third-party service.

Before installing, make sure you are comfortable using a paid reddapi.dev API key and sending your Reddit research queries to that service. Avoid including secrets or sensitive business details in queries, and monitor API-key usage.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your reddapi.dev account key may be used for API calls, which can consume monthly limits or paid-plan quota.

Why it was flagged

The skill expects a third-party API key and bearer authentication. This is purpose-aligned for reddapi.dev access, but it is still a credential that should be protected and can consume paid quota.

Skill content
export REDDAPI_API_KEY="your_api_key" ... Authentication: All requests require header: Authorization: Bearer YOUR_API_KEY
Recommendation

Use a dedicated key if possible, avoid pasting it into chats or logs, monitor reddapi.dev usage, and revoke or rotate the key if it is exposed.

What this means

Search terms, research topics, and the API key are sent to reddapi.dev rather than staying local.

Why it was flagged

The skill sends user search queries to an external provider API. This is disclosed and central to the skill's function, but users should understand the data boundary.

Skill content
Base URL: `https://reddapi.dev` ... curl -X POST "https://reddapi.dev/api/v1/search/semantic" ... -d '{"query": "What do developers think about Rust vs Go for backend services?", "limit": 20}'
Recommendation

Do not include confidential business plans, personal data, or secrets in search queries unless you are comfortable sharing them with reddapi.dev and have reviewed its privacy terms.