← 返回 Skills 市场
Reddit
作者
theglove44
· GitHub ↗
· v1.0.0
12041
总下载
48
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install reddit
功能描述
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup.
安全使用建议
Review before installing. Use a dedicated low-privilege Reddit app/account, grant only scopes you actually need, avoid putting Reddit passwords in environment variables, protect or delete ~/.reddit-token.json when not needed, and require explicit human approval before submit, reply, remove, approve, sticky, lock, or unlock commands.
功能分析
Type: OpenClaw Skill
Name: reddit
Version: 1.0.0
The skill is classified as benign. It provides a Reddit CLI tool that uses standard OAuth 2.0 for authentication, storing tokens in `~/.reddit-token.json`. It reads `REDDIT_CLIENT_ID` and `REDDIT_CLIENT_SECRET` from environment variables. The `scripts/reddit.mjs` file uses `child_process.exec` to open a browser for the OAuth login flow, which is a controlled and legitimate use case for a CLI tool requiring browser interaction, not arbitrary command execution. All network requests are directed to official Reddit domains. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms beyond token storage, or prompt injection attempts in `SKILL.md` or `README.md`.
能力评估
Purpose & Capability
The stated purpose matches the artifact: it can browse/search Reddit without auth and can submit posts, reply, and perform moderation actions with OAuth. Those write and moderation capabilities are high-impact public/account actions.
Instruction Scope
The docs distinguish read-only from OAuth-required actions, but they do not add confirmation, dry-run, subreddit allowlisting, or prominent warnings before live posting or moderation changes.
Install Mechanism
The skill consists of markdown instructions and a local Node script requiring the node binary; there is no hidden installer, background service, or package install hook.
Credentials
Reddit OAuth credentials are purpose-aligned, but the docs ask users to set a Reddit username and password even though the script only uses client ID and client secret, and the requested OAuth scopes include broad moderation-related permissions.
Persistence & Privilege
The script stores access and refresh tokens in ~/.reddit-token.json and auto-refreshes them. This is disclosed and useful for the CLI, but the file is written without restrictive permissions or a secure credential store.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install reddit - 安装完成后，直接呼叫该 Skill 的名称或使用
/reddit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: browse, search, post, and moderate subreddits
元数据
常见问题
Reddit 是什么？
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 12041 次。
如何安装 Reddit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install reddit」即可一键安装，无需额外配置。
Reddit 是免费的吗？
是的，Reddit 完全免费（开源免费），可自由下载、安装和使用。
Reddit 支持哪些平台？
Reddit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Reddit？
由 theglove44（@theglove44）开发并维护，当前版本 v1.0.0。
推荐 Skills