ClawHub

comment-converter

v1.0.1

Turn Reddit thread context into genuinely helpful comments that build trust and can convert to profile/link clicks.

⭐ 0· 642·3 current·3 all-time
by@xammarie
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (generate Reddit comments that convert readers) aligns with the SKILL.md: it requires only thread text, top comments, viewpoint, and an optional conversion goal. There are no unrelated requirements (no cloud creds, binaries, or config paths).
✓
Instruction Scope
Runtime instructions are limited to creating several comment styles, following explicit rules (value-first, match subreddit tone, be specific). The conversion steps (soft CTA, DM/link only after value) are within the stated purpose. The SKILL.md does not instruct the agent to read unrelated files, access extra env vars, or contact external endpoints.
✓
Install Mechanism
No install specification or code files are present; it's instruction-only so nothing is downloaded or written to disk.
✓
Credentials
The skill declares no required environment variables, credentials, or config paths. The SKILL.md does not reference hidden environment variables or other secrets.
✓
Persistence & Privilege
The skill is not marked always:true and does not ask to modify agent/system settings. Autonomous invocation is allowed by default but that is normal; the skill itself does not request elevated persistence.
Assessment
This skill is internally coherent and does not request credentials or install code, but consider these practical points before enabling it: (1) Content risk: the skill is explicitly designed to 'convert' readers — that can cross into spam, astroturfing, or policy-violating behavior depending on how its outputs are used. Review subreddit rules and platform ToS before posting. (2) Source verification: the package has no homepage and an unknown source owner; if you plan to trust its outputs automatically, prefer manual review of generated comments. (3) Autonomous posting: the skill itself doesn't post, but if your agent is configured to post or message automatically, restrict that capability or require user confirmation. (4) Test it: run several prompts and inspect drafts for tone, accuracy, and unintended leakage of private info. If you want a stricter posture, only allow the skill to be invoked on-demand (not autonomously) and avoid giving it any automatic posting privileges.

Like a lobster shell, security has layers — review code before you run it.

latestvk979exvh9hdggbdsx9ek9ma5md81b59e

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments