← 返回 Skills 市场
Reddit
作者
theglove44
· GitHub ↗
· v1.0.0
11497
总下载
47
收藏
132
当前安装
1
版本数
在 OpenClaw 中安装
/install reddit
功能描述
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup.
安全使用建议
Review before installing. Use a dedicated low-privilege Reddit account or app, grant only the OAuth scopes you actually need, avoid shared machines, restrict permissions on ~/.reddit-token.json, and require explicit human approval before using submit, reply, or moderation commands.
功能分析
Type: OpenClaw Skill
Name: reddit
Version: 1.0.0
The skill is classified as benign. It provides a Reddit CLI tool that uses standard OAuth 2.0 for authentication, storing tokens in `~/.reddit-token.json`. It reads `REDDIT_CLIENT_ID` and `REDDIT_CLIENT_SECRET` from environment variables. The `scripts/reddit.mjs` file uses `child_process.exec` to open a browser for the OAuth login flow, which is a controlled and legitimate use case for a CLI tool requiring browser interaction, not arbitrary command execution. All network requests are directed to official Reddit domains. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms beyond token storage, or prompt injection attempts in `SKILL.md` or `README.md`.
能力评估
Purpose & Capability
The stated purpose matches the implementation: it reads Reddit content and can submit posts, reply, remove, approve, sticky, lock, and unlock content. Those write and moderation actions are high-impact public/account actions and are exposed as direct CLI commands.
Instruction Scope
The docs disclose which commands require OAuth and moderator permissions, but they do not require confirmation, dry-run behavior, allowlisted subreddits, or other controls before live posting or moderation changes.
Install Mechanism
The artifact requires Node and includes a local script only; there is no package install hook, background service, or hidden installer behavior.
Credentials
Reddit OAuth is expected for this purpose, but the requested scopes include broad moderation capabilities beyond the visible command set, and the README asks users to set username/password variables even though the script only uses client ID and client secret.
Persistence & Privilege
The skill stores refreshable OAuth tokens in ~/.reddit-token.json and auto-refreshes them. This persistence is disclosed and purpose-aligned, but the script does not set restrictive file permissions or use an OS credential store.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install reddit - 安装完成后，直接呼叫该 Skill 的名称或使用
/reddit触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: browse, search, post, and moderate subreddits
元数据
常见问题
Reddit 是什么？
Browse, search, post, and moderate Reddit. Read-only works without auth; posting/moderation requires OAuth setup. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 11497 次。
如何安装 Reddit？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install reddit」即可一键安装，无需额外配置。
Reddit 是免费的吗？
是的，Reddit 完全免费（开源免费），可自由下载、安装和使用。
Reddit 支持哪些平台？
Reddit 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Reddit？
由 theglove44（@theglove44）开发并维护，当前版本 v1.0.0。
推荐 Skills