Reddit (read only - no auth)

v1.0.0

Browse and search Reddit in read-only mode using public JSON endpoints. Use when the user asks to browse subreddits, search for posts by topic, inspect comment threads, or build a shortlist of links to review and reply to manually.

33· 14k·109 current·116 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (read-only Reddit browsing) matches the actual code and runtime needs: the script fetches from https://www.reddit.com, normalizes posts/comments, and outputs JSON. Declared required binary 'node' is appropriate.
Instruction Scope
SKILL.md instructs only to run the included Node script against Reddit public JSON endpoints and to return permalinks. Instructions reference only optional pacing/timeouts via REDDIT_RO_* env vars which the script actually honors. There is no guidance to read unrelated files, grab other credentials, or send data to third-party endpoints.
Install Mechanism
No install spec (instruction-only) and the code file is a self-contained Node CLI. Nothing is downloaded or written during install; runtime performs normal HTTPS calls to reddit.com.
Credentials
The skill requires no credentials and declares no config paths. It optionally reads REDDIT_RO_* env vars for rate limiting, timeout, and user-agent—these are proportional to HTTP client behavior and are documented in SKILL.md.
Persistence & Privilege
always is false and the skill does not request persistent system modifications or access to other skills' configs. It simply executes as a CLI script when invoked.
Assessment
This skill appears coherent and limited to read-only Reddit browsing, but before installing note: it requires Node.js 18+ (uses global fetch), will make outbound HTTPS requests to reddit.com, and can be invoked autonomously by the agent (normal default). Optional REDDIT_RO_* env vars control pacing and user-agent — you may set them to be polite or to increase timeouts. If you want extra assurance, inspect the full script (scripts/reddit-readonly.mjs) yourself to confirm there are no additional network hosts or unexpected behavior in the truncated portion, and be aware the agent will receive Reddit data (titles, snippets, permalinks) and may present it to users.

Like a lobster shell, security has layers — review code before you run it.

latestvk971rqzhascnd9bap8tfqkqt6580d67e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔎 Clawdis
Binsnode

Comments