ClawHub

Reddit Researcher

v1.0.1

Search and analyze Reddit posts and comments to summarize user opinions, troubleshoot issues, and track trends across communities and topics.

⭐ 6· 1.3k·7 current·7 all-time
by@zachgodsell93
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe Reddit search and analysis and the SKILL.md only asks for Reddit API access (optional) and common CLI tools (curl, jq). The declared optional environment variables and oauth credential align with this purpose.
✓
Instruction Scope
Instructions are limited to making HTTP calls to reddit.com endpoints, obtaining an OAuth token, and parsing JSON. They do not instruct reading arbitrary local files, accessing unrelated services, or exfiltrating data to third-party endpoints.
✓
Install Mechanism
No install spec or code files are included (instruction-only), so nothing will be written to disk by the skill itself. This is the lowest-risk install posture.
✓
Credentials
No required environment variables or secrets are enforced. The SKILL.md documents optional Reddit credentials (client id/secret/user agent) which are appropriate and proportionate for higher-rate authenticated API access.
✓
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges or modify other skills/configs. Autonomous invocation is allowed by platform default but not combined with other concerning flags.
Assessment
This skill is internally consistent and behaves like a simple Reddit scraper/helper. Before installing: (1) only provide Reddit credentials if you trust the skill — use a dedicated account and rotate credentials; (2) prefer a secrets manager over environment variables in production; (3) follow Reddit's API terms and rate limits to avoid bans; (4) note the skill will make network requests to reddit.com and may retrieve public user-generated content, so consider privacy/regulatory requirements for downstream use. If you need verification of network targets, ask the publisher for a homepage or source repository (none is provided).

Like a lobster shell, security has layers — review code before you run it.

latestvk978bvxnntjcqy1ptv7pk6acq9812tq9

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments