Reddit Marketing and GEO Skill

PassAudited by ClawScan on May 10, 2026.

Overview

The skill is transparent about running a scheduled Reddit-monitoring sub-agent and requires approval before posting, but users should understand it can keep running in the background and use the browser to comment publicly.

Before installing, confirm that you want a twice-daily background Reddit-monitoring agent. Enable browser and sessions_spawn only if you are comfortable with approved comments being posted from the active Reddit account, and carefully review every draft and URL before saying 'Go' or 'Post'.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill may continue checking Reddit and preparing reports twice per day in the background.

Why it was flagged

The skill intentionally creates a background sub-agent that operates on a schedule. This is disclosed and purpose-aligned, but users should notice the persistence and background autonomy.

Skill content
Upon first run, the primary agent must **spawn a specialized sub-agent** named `reddit-geo-marketing-agent`... The `reddit-geo-marketing-agent` is initialized via `sessions_spawn` to run in the background.
Recommendation

Install only if you want a recurring background agent, and make sure you know how to change, pause, or remove the schedule.

What this means

If you approve a draft, the agent may publish it publicly on Reddit.

Why it was flagged

The browser tool can be used to submit public Reddit comments. The approval requirement is a mitigating control, but posting public content is still a high-impact tool action.

Skill content
**Strict Requirement**: Each draft must receive a "Go" or "Post" command before the `browser` tool is used to submit the comment.
Recommendation

Review the URL, thread context, and exact text before saying 'Go' or 'Post'; avoid broad approvals for multiple drafts unless that is intended.

What this means

Approved comments could be posted from whichever Reddit account is active in the browser environment.

Why it was flagged

Using the browser to post Reddit comments may rely on an active Reddit login or browser session. That is expected for this purpose, but the artifacts do not specify which account will be used.

Skill content
Ensure `sessions_spawn` and `browser` tools are enabled in your `openclaw.json`.
Recommendation

Confirm which Reddit account the browser session uses before approving posts, and consider using a dedicated account if appropriate.

What this means

You have less external information to verify who maintains the skill or where updates come from.

Why it was flagged

The skill has limited provenance information. This is not suspicious by itself, especially because no code files or install scripts are present, but it matters when enabling background and browser capabilities.

Skill content
Source: unknown; Homepage: none
Recommendation

Review the included instructions carefully and enable only the tools you are comfortable granting to this skill.