Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Keyapi Reddit User Analysis

v1.0.0

Discover and analyze Reddit users and subreddits — retrieve user profiles, active communities, public trophies, subreddit rules, settings, post channels, and...

0· 89·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lycici/keyapi-reddit-user-analysis.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Keyapi Reddit User Analysis" (lycici/keyapi-reddit-user-analysis) from ClawHub.
Skill page: https://clawhub.ai/lycici/keyapi-reddit-user-analysis
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: KEYAPI_TOKEN
Required binaries: node
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install keyapi-reddit-user-analysis

ClawHub CLI

Package manager switcher

npx clawhub@latest install keyapi-reddit-user-analysis
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description match the implementation: the skill is a Node.js MCP client that calls KeyAPI's Reddit tools. Required items (node, KEYAPI_TOKEN, @modelcontextprotocol/sdk) are appropriate and proportional to the declared purpose.
Instruction Scope
SKILL.md instructs running scripts/run.js to list tools and call MCP endpoints; the runtime will read a .env file (if present), may prompt for the KEYAPI_TOKEN interactively, and will persist that token to a .env file when entered interactively. The script also reads/writes a local cache directory (.keyapi-cache) and can write an arbitrary output file if --output is used. It does not appear to read unrelated system files or request unrelated credentials.
Install Mechanism
No remote download/install spec in the registry; the skill is instruction+code and requires running npm install to fetch @modelcontextprotocol/sdk from the npm registry. No arbitrary URL downloads or archive extraction are present in the provided files.
Credentials
Only KEYAPI_TOKEN (primary credential) is required, which is appropriate for API access. The script will persist the token to a .env file in the skill directory when prompted interactively — users should be aware this writes a secret to disk. An optional KEYAPI_SERVER_URL override exists for redirecting MCP traffic.
Persistence & Privilege
always is false and the skill does not request system-wide privileges. It will create/modify files inside the skill directory (.env and .keyapi-cache) and can write a user-specified output path. This local persistence is for caching and convenience, not for modifying other skills or global agent config.
Assessment
This skill appears to be what it claims: a KeyAPI MCP client for Reddit intelligence that needs NODE and a KEYAPI_TOKEN. Before installing, consider: (1) The runner will save a provided KEYAPI_TOKEN to a .env file in the skill directory if you enter it interactively — treat that file as sensitive or avoid interactive entry and set the token via your environment instead. (2) The skill creates a local cache directory (.keyapi-cache) and can write an output file you specify; review and clean these files if you share the environment. (3) The MCP server URL defaults to https://mcp.keyapi.ai but can be overridden — verify endpoints if you have concerns. (4) If you plan to use a production API token, consider issuing a scoped or limited token or using a throwaway token for evaluation. If you want further assurance, inspect the remainder of scripts/run.js (network call handling, any proxying of images) and the upstream repository before use.
scripts/run.js:52
Environment variable access combined with network send.
!
scripts/run.js:37
File read combined with network send (possible exfiltration).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔎 Clawdis
Binsnode
EnvKEYAPI_TOKEN
Primary envKEYAPI_TOKEN
latestvk974c16mgjef1f41khwd5303z5844mrm
89downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

keyapi-reddit-user-analysis

Discover and analyze Reddit users and subreddits — from user profiles and community activity to subreddit governance, search intelligence, and trending topic discovery.

This skill provides comprehensive Reddit user and community intelligence using the KeyAPI MCP service. It enables retrieval of user profiles, active subreddit memberships, public trophies, subreddit rules and style, post channels, settings, mute status, and powerful search capabilities including typeahead suggestions, dynamic multi-type search, and trending search topics — all through a unified, cache-first workflow.

Use this skill when you need to:

  • Retrieve a Reddit user's public profile, karma breakdown, and account metadata
  • Identify the subreddits a user is most active in
  • Audit a user's public trophies and achievement history
  • Research subreddit rules, style guidelines, and community settings
  • Discover post channels and content categories within a subreddit
  • Search Reddit for posts, communities, users, comments, and media
  • Monitor trending search topics across the platform

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

Prerequisites

RequirementDetails
KEYAPI_TOKENA valid API token from keyapi.ai. Register at the site to obtain your free token. Set it as an environment variable: export KEYAPI_TOKEN=your_token_here
Node.jsv18 or higher
DependenciesRun npm install in the skill directory to install @modelcontextprotocol/sdk

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

MCP Server Configuration

All tool calls in this skill target the KeyAPI Reddit MCP server:

Server URL : https://mcp.keyapi.ai/reddit/mcp
Auth Header: Authorization: Bearer $KEYAPI_TOKEN

Setup (one-time):

# 1. Install dependencies
npm install

# 2. Set your API token (get one free at https://keyapi.ai/)
export KEYAPI_TOKEN=your_token_here

# 3. List all available tools to verify the connection
node scripts/run.js --platform reddit --list-tools

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

Analysis Scenarios

User NeedNode(s)Best For
User profile, karma, account agefetch_reddit_app_user_profileUser identity research, credibility assessment
Most active subreddits for a userfetch_users_active_subredditsCommunity affiliation mapping, interest profiling
User's public trophies and achievementsfetch_user_public_trophiesAccount reputation, milestone tracking
Subreddit rules and style infofetch_reddit_app_subreddit_rules_and_style_infoCommunity governance research, moderation policy
Subreddit post channels / content categoriesfetch_reddit_app_subreddit_post_channelsContent taxonomy, channel structure
Subreddit general info and metadatafetch_reddit_app_subreddit_infoCommunity overview, subscriber count, description
Subreddit settings and moderation configfetch_reddit_app_subreddit_settingsAdmin/moderation research, policy analysis
Check if a subreddit is mutedcheck_if_subreddit_is_mutedMute status verification
Search autocomplete suggestionsfetch_reddit_app_search_typeahead_suggestionsQuery refinement, subreddit/user discovery
Dynamic multi-type searchfetch_reddit_app_dynamic_search_resultsPosts, communities, comments, media, user search
Platform-wide trending searchesfetch_reddit_app_trending_searchesTrend intelligence, topic monitoring

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

Workflow

Step 1 — Identify Analysis Targets and Select Nodes

Clarify the research objective and map it to one or more nodes. Typical entry points:

  • User research: Use fetch_reddit_app_user_profilefetch_users_active_subredditsfetch_user_public_trophies.
  • Subreddit audit: Use fetch_reddit_app_subreddit_infofetch_reddit_app_subreddit_rules_and_style_infofetch_reddit_app_subreddit_post_channels.
  • Search workflow: Use fetch_reddit_app_search_typeahead_suggestions to refine query, then fetch_reddit_app_dynamic_search_results for full results.
  • Trend monitoring: Use fetch_reddit_app_trending_searches (no parameters required).

Subreddit Identifier: subreddit_name vs. subreddit_id

Two different identifiers are used across subreddit endpoints:

  • subreddit_name — the display name (e.g., technology, worldnews). Used by fetch_reddit_app_subreddit_rules_and_style_info, fetch_reddit_app_subreddit_post_channels, fetch_reddit_app_subreddit_info.
  • subreddit_id — the internal ID with a t5_ prefix (e.g., t5_2qh0u). Required by fetch_reddit_app_subreddit_settings, check_if_subreddit_is_muted, fetch_reddit_app_community_highlights.

Call fetch_reddit_app_subreddit_info with subreddit_name first to obtain the subreddit_id when needed.

fetch_reddit_app_trending_searches

This endpoint requires no parameters. Call it directly to retrieve the current list of trending search topics across Reddit.

need_format Parameter

Most endpoints accept an optional need_format boolean. Set to true for sanitized/cleaned response data. Defaults to false.

Step 2 — Retrieve API Schema

Before calling any node, inspect its input schema to confirm required parameters and available options:

node scripts/run.js --platform reddit --schema <tool_name>

# Examples
node scripts/run.js --platform reddit --schema fetch_reddit_app_user_profile
node scripts/run.js --platform reddit --schema fetch_reddit_app_dynamic_search_results

Step 3 — Call APIs and Cache Results Locally

Execute tool calls and persist responses to the local cache to avoid redundant API calls.

Calling a tool:

# Single call with pretty output
node scripts/run.js --platform reddit --tool <tool_name> \
  --params '<json_args>' --pretty

# Force fresh data, skip cache
node scripts/run.js --platform reddit --tool <tool_name> \
  --params '<json_args>' --no-cache --pretty

Example — get user profile:

node scripts/run.js --platform reddit --tool fetch_reddit_app_user_profile \
  --params '{"username":"spez"}' --pretty

Example — get user's active subreddits:

node scripts/run.js --platform reddit --tool fetch_users_active_subreddits \
  --params '{"username":"spez"}' --pretty

Example — get subreddit post channels (with sort and range):

node scripts/run.js --platform reddit --tool fetch_reddit_app_subreddit_post_channels \
  --params '{"subreddit_name":"technology","sort":"HOT","range":"DAY"}' --pretty

Example — get subreddit settings (requires t5_ prefixed subreddit_id):

node scripts/run.js --platform reddit --tool fetch_reddit_app_subreddit_settings \
  --params '{"subreddit_id":"t5_2qh0u"}' --pretty

Example — get subreddit info:

node scripts/run.js --platform reddit --tool fetch_reddit_app_subreddit_info \
  --params '{"subreddit_name":"technology"}' --pretty

Example — dynamic search for posts:

node scripts/run.js --platform reddit --tool fetch_reddit_app_dynamic_search_results \
  --params '{"query":"AI regulation","search_type":"post","sort":"RELEVANCE","time_range":"month"}' --pretty

Example — get trending searches (no params):

node scripts/run.js --platform reddit --tool fetch_reddit_app_trending_searches \
  --params '{}' --pretty

fetch_reddit_app_dynamic_search_results options:

ParameterOptionsDescription
search_typepost, community, comment, media, userType of content to search (singular form)
sortRELEVANCE, HOT, TOP, NEW, COMMENTSSort order (uppercase)
time_rangeall, hour, day, week, month, yearTime filter
safe_search"unset", "on", "off"Safe search setting (string, not boolean)
allow_nsfw"0" (exclude), "1" (include)NSFW content filter (string, not boolean)
aftercursor stringPagination cursor

Pagination:

EndpointPagination parameterNotes
fetch_reddit_app_dynamic_search_resultsafter (cursor string)Pass cursor from previous response
fetch_reddit_app_user_profile, fetch_users_active_subreddits, fetch_user_public_trophiesSingle-call response
fetch_reddit_app_subreddit_* endpointsSingle-call response
fetch_reddit_app_trending_searchesNo parameters, single-call response

Cache directory structure:

.keyapi-cache/
└── YYYY-MM-DD/
    ├── fetch_reddit_app_user_profile/
    │   └── {params_hash}.json
    ├── fetch_users_active_subreddits/
    │   └── {params_hash}.json
    ├── fetch_user_public_trophies/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_subreddit_rules_and_style_info/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_subreddit_post_channels/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_subreddit_info/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_subreddit_settings/
    │   └── {params_hash}.json
    ├── check_if_subreddit_is_muted/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_search_typeahead_suggestions/
    │   └── {params_hash}.json
    ├── fetch_reddit_app_dynamic_search_results/
    │   └── {params_hash}.json
    └── fetch_reddit_app_trending_searches/
        └── {params_hash}.json

Cache-first policy:

Before every API call, check whether a cached result already exists for the given parameters. If a valid cache file exists, load from disk and skip the API call.

Step 4 — Synthesize and Report Findings

After collecting all API responses, produce a structured user and community intelligence report:

For user analysis:

  1. User Profile — Username, karma breakdown (post/comment), account age, verification status, premium status.
  2. Community Footprint — Most active subreddits, participation frequency, community diversity.
  3. Achievement History — Public trophies, milestone dates, recognition type.
  4. Behavioral Signals — Activity patterns, community focus areas, engagement style.

For subreddit research:

  1. Community Overview — Name, subscriber count, description, creation date, NSFW status.
  2. Governance Structure — Rules, posting requirements, moderation policies, style guidelines.
  3. Content Architecture — Post channels, content categories, flair taxonomy.
  4. Settings Profile — Posting rules, badge configuration, moderation settings.

For search intelligence:

  1. Search Results — Matched posts, communities, users, or comments with relevance scores.
  2. Trending Topics — Current platform-wide trending searches and emerging discussions.
  3. Discovery Signals — Subreddit recommendations, user suggestions from typeahead.

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

Common Rules

RuleDetail
Subreddit identifierUse subreddit_name for info/rules/channels endpoints. Use subreddit_id (with t5_ prefix, e.g., t5_2qh0u) for settings/mute/highlights endpoints. Call fetch_reddit_app_subreddit_info first to resolve it from name.
fetch_reddit_app_trending_searchesRequires no parameters. Call with empty params {}.
need_formatSet to true for sanitized output. Defaults to false.
Dynamic search typessearch_type options: post, community, comment, media, user (singular form). sort options: RELEVANCE, HOT, TOP, NEW, COMMENTS (uppercase).
Dynamic search string paramssafe_search is a string ("unset", "on", "off"). allow_nsfw is a string ("0" to exclude, "1" to include). Neither is a boolean.
fetch_reddit_app_subreddit_post_channelsAccepts a range param (default: DAY) in addition to sort. Valid range values: HOUR, DAY, WEEK, MONTH, YEAR, ALL.
fetch_user_comments page_sizeSupports page_size (integer, default 25) to control how many comments are returned per page.
Success checkcode = 0 → success. Any other value → failure. Always check the response code before processing data.
Retry on 500If code = 500, retry the identical request up to 3 times with a 2–3 second pause between attempts before reporting the error.
Cache firstAlways check the local .keyapi-cache/ directory before issuing a live API call.

author: KeyAPI license: MIT repository: https://github.com/EchoSell/keyapi-skills

Error Handling

CodeMeaningAction
0SuccessContinue workflow normally
400Bad request — invalid or missing parametersValidate input; ensure correct identifier type (subreddit_name vs. subreddit_id)
401Unauthorized — token missing or expiredConfirm KEYAPI_TOKEN is set correctly; visit keyapi.ai to renew
403Forbidden — plan quota exceeded or feature restrictedReview plan limits at keyapi.ai
404Resource not found — user or subreddit may not exist or be bannedVerify the username or subreddit name; banned/private subreddits may return no data
429Rate limit exceededWait 60 seconds, then retry
500Internal server errorRetry up to 3 times with a 2–3 second pause; if it persists, log the full request and response and skip this node
Other non-0Unexpected errorLog the full response body and surface the error message to the user

Comments

Loading comments...