Reddit Search But Free

Reddit research skill — zero auth, zero dependencies, three data providers. Search posts, read threads with comments, monitor subreddits, analyze users, trac...

This skill looks coherent and implements the advertised Reddit research features, but consider the following before installing: - It performs outbound HTTP requests to old.reddit.com and two third-party archive domains (PullPush, Arctic Shift). Only install if you are comfortable with those network endpoints. - The CLI uses 'npx tsx' to run TypeScript; if tsx is not installed locally, npx will fetch it from the npm registry on first run — run in an isolated environment if you prefer not to pull packages on demand. - The skill writes cache and watchlist files under its own data/ directory (data/cache, data/watchlist.json). If you install into a shared workspace, review those files and their contents periodically. - The repository source is listed as unknown / no homepage; if provenance matters, consider auditing the code locally (you can inspect scripts/*.ts) before running, or run inside a sandbox/container. - If you allow agents to invoke skills autonomously, remember this skill will make network requests as part of searches and watchlist checks; limit autonomous permissions if you want stricter control. Overall, the package appears benign and proportionate to its stated purpose. If you want higher assurance, review the included TypeScript files locally or run the tool in an isolated environment first.

Type: OpenClaw Skill Name: reddit-search-but-free Version: 1.0.0 The skill is a Reddit research agent that interacts with legitimate Reddit and Reddit archive APIs (old.reddit.com, api.pullpush.io, arctic-shift.photon-reddit.com). All network requests are confined to these domains. File system operations are restricted to the skill's `data/cache` and `data/watchlist.json` directories, with filenames safely constructed or hashed to prevent path traversal. There is no evidence of malicious execution, data exfiltration, persistence mechanisms, or prompt injection attempts in the `SKILL.md` or `README.md` files. The code uses safe methods for argument parsing and URL construction, and explicitly states 'zero dependencies', which is confirmed by `package.json`.