Search and analyze Reddit posts and comments to summarize user opinions, troubleshoot issues, and track trends across communities and topics.
Security Analysis
high confidenceThe skill's requests and runtime instructions match its stated purpose (searching and summarizing Reddit) and do not ask for unrelated privileges or risky installs.
Name/description describe Reddit search and analysis and the SKILL.md only asks for Reddit API access (optional) and common CLI tools (curl, jq). The declared optional environment variables and oauth credential align with this purpose.
Instructions are limited to making HTTP calls to reddit.com endpoints, obtaining an OAuth token, and parsing JSON. They do not instruct reading arbitrary local files, accessing unrelated services, or exfiltrating data to third-party endpoints.
No install spec or code files are included (instruction-only), so nothing will be written to disk by the skill itself. This is the lowest-risk install posture.
No required environment variables or secrets are enforced. The SKILL.md documents optional Reddit credentials (client id/secret/user agent) which are appropriate and proportionate for higher-rate authenticated API access.
Skill is not always-enabled and does not request elevated platform privileges or modify other skills/configs. Autonomous invocation is allowed by platform default but not combined with other concerning flags.
Guidance
This skill is internally consistent and behaves like a simple Reddit scraper/helper. Before installing: (1) only provide Reddit credentials if you trust the skill — use a dedicated account and rotate credentials; (2) prefer a secrets manager over environment variables in production; (3) follow Reddit's API terms and rate limits to avoid bans; (4) note the skill will make network requests to reddit.com and may retrieve public user-generated content, so consider privacy/regulatory requirements for downstream use. If you need verification of network targets, ask the publisher for a homepage or source repository (none is provided).
Latest Release
v1.0.1
- Added explicit support for OAuth credentials and environment variables, enabling higher API rate limits. - Documented security best practices for Reddit API credentials. - Updated the SKILL file to include `credentials`, `env_vars`, and `tools` fields for improved integration and clarity. - No changes to research workflow, API usage, or end-user functionality.
More by @zachgodsell93
Published by @zachgodsell93 on ClawHub
