Reddit (read only - no auth)

• Analyzed: May 12, 2026, 3:05 AM
• Findings: 1
• Version: 1.0.0
• Hash: 9d1d4dd9126910be53c194473bb43e30a975ced31f0e80869c54079373f4f531
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw skill bundle is benign. The `SKILL.md` clearly states its read-only purpose and provides agent instructions that align with responsible usage, without any prompt injection attempts to subvert the agent. The `scripts/reddit-readonly.mjs` script exclusively interacts with `https://www.reddit.com` and reads only specific environment variables (`REDDIT_RO_MIN_DELAY_MS`, `REDDIT_RO_MAX_DELAY_MS`, `REDDIT_RO_TIMEOUT_MS`, `REDDIT_RO_USER_AGENT`) related to its own rate-limiting and user-agent configuration, not sensitive system credentials. There is no evidence of data exfiltration, malicious execution, persistence, or obfuscation.