← Back to Skills Marketplace
Reddit
by
theglove44
· GitHub ↗
· v1.0.0
12041
Downloads
48
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install reddit
Description
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup.
Usage Guidance
Review before installing. Use a dedicated low-privilege Reddit app/account, grant only scopes you actually need, avoid putting Reddit passwords in environment variables, protect or delete ~/.reddit-token.json when not needed, and require explicit human approval before submit, reply, remove, approve, sticky, lock, or unlock commands.
Capability Analysis
Type: OpenClaw Skill
Name: reddit
Version: 1.0.0
The skill is classified as benign. It provides a Reddit CLI tool that uses standard OAuth 2.0 for authentication, storing tokens in `~/.reddit-token.json`. It reads `REDDIT_CLIENT_ID` and `REDDIT_CLIENT_SECRET` from environment variables. The `scripts/reddit.mjs` file uses `child_process.exec` to open a browser for the OAuth login flow, which is a controlled and legitimate use case for a CLI tool requiring browser interaction, not arbitrary command execution. All network requests are directed to official Reddit domains. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms beyond token storage, or prompt injection attempts in `SKILL.md` or `README.md`.
Capability Assessment
Purpose & Capability
The stated purpose matches the artifact: it can browse/search Reddit without auth and can submit posts, reply, and perform moderation actions with OAuth. Those write and moderation capabilities are high-impact public/account actions.
Instruction Scope
The docs distinguish read-only from OAuth-required actions, but they do not add confirmation, dry-run, subreddit allowlisting, or prominent warnings before live posting or moderation changes.
Install Mechanism
The skill consists of markdown instructions and a local Node script requiring the node binary; there is no hidden installer, background service, or package install hook.
Credentials
Reddit OAuth credentials are purpose-aligned, but the docs ask users to set a Reddit username and password even though the script only uses client ID and client secret, and the requested OAuth scopes include broad moderation-related permissions.
Persistence & Privilege
The script stores access and refresh tokens in ~/.reddit-token.json and auto-refreshes them. This is disclosed and useful for the CLI, but the file is written without restrictive permissions or a secure credential store.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install reddit - After installation, invoke the skill by name or use
/reddit - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: browse, search, post, and moderate subreddits
Metadata
Frequently Asked Questions
What is Reddit?
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup. It is an AI Agent Skill for Claude Code / OpenClaw, with 12041 downloads so far.
How do I install Reddit?
Run "/install reddit" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Reddit free?
Yes, Reddit is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Reddit support?
Reddit is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Reddit?
It is built and maintained by theglove44 (@theglove44); the current version is v1.0.0.
More Skills