Browse and search Reddit in read-only mode using public JSON endpoints. Use when the user asks to browse subreddits, search for posts by topic, inspect comment threads, or build a shortlist of links to review and reply to manually.
Security Analysis
high confidenceThe skill implements read-only Reddit browsing using public reddit.com JSON endpoints, requires only Node (18+), and its code, instructions, and env vars align with the stated purpose.
Name/description (read-only Reddit browsing) matches the actual code and runtime needs: the script fetches from https://www.reddit.com, normalizes posts/comments, and outputs JSON. Declared required binary 'node' is appropriate.
SKILL.md instructs only to run the included Node script against Reddit public JSON endpoints and to return permalinks. Instructions reference only optional pacing/timeouts via REDDIT_RO_* env vars which the script actually honors. There is no guidance to read unrelated files, grab other credentials, or send data to third-party endpoints.
No install spec (instruction-only) and the code file is a self-contained Node CLI. Nothing is downloaded or written during install; runtime performs normal HTTPS calls to reddit.com.
The skill requires no credentials and declares no config paths. It optionally reads REDDIT_RO_* env vars for rate limiting, timeout, and user-agent—these are proportional to HTTP client behavior and are documented in SKILL.md.
always is false and the skill does not request persistent system modifications or access to other skills' configs. It simply executes as a CLI script when invoked.
Guidance
This skill appears coherent and limited to read-only Reddit browsing, but before installing note: it requires Node.js 18+ (uses global fetch), will make outbound HTTPS requests to reddit.com, and can be invoked autonomously by the agent (normal default). Optional REDDIT_RO_* env vars control pacing and user-agent — you may set them to be polite or to increase timeouts. If you want extra assurance, inspect the full script (scripts/reddit-readonly.mjs) yourself to confirm there are no additional network hosts or unexpected behavior in the truncated portion, and be aware the agent will receive Reddit data (titles, snippets, permalinks) and may present it to users.
Latest Release
v1.0.0
- Initial public release. - Enables read-only browsing and searching of Reddit using public JSON endpoints. - Supports subreddit post listings, post and comment searches, comment/thread fetching, and constructing shortlists of permalinks. - Strictly read-only: never posts, replies, votes, or moderates. - All commands output standardized JSON for easy parsing and error handling. - Includes multi-subreddit search helper for complex criteria-based discovery.
Popular Skills
Published by @buksan1950 on ClawHub
