← 返回 Skills 市场
kelsia14

Reddit Cli

作者 kelsia · GitHub ↗ · v1.0.2
cross-platform ✓ 安全检测通过
3872
总下载
4
收藏
21
当前安装
3
版本数
在 OpenClaw 中安装
/install reddit-cli
功能描述
Reddit CLI using cookies for authentication. Read posts, search, and get subreddit info.
安全使用建议
This skill is internally coherent and implements a read-only Reddit CLI that uses your browser session cookies, but take these precautions before installing: (1) verify the source — prefer the GitHub repo URL and a trusted author; (2) don't paste long-lived session cookies into global shell rc files if you can avoid it — consider using a short-lived session, a dedicated account, or a container/VM; (3) be aware that REDDIT_SESSION and token_v2 are sensitive credentials: anyone with them can act as your session; (4) confirm you have Node.js installed (the script is a Node program); (5) review the included script yourself (it only calls reddit.com endpoints), and if you can't review code, run it in an isolated environment; (6) consider using Reddit's official OAuth flow (or read-only public endpoints) instead of exporting browser cookies for better security.
功能分析
Type: OpenClaw Skill Name: reddit-cli Version: 1.0.2 The OpenClaw skill 'reddit-cli' is classified as benign. The `scripts/reddit-cli.js` file correctly implements a Reddit CLI, reading `REDDIT_SESSION` and `TOKEN_V2` environment variables as explicitly stated in `SKILL.md` and `README.md`. These cookies are used solely for authentication with `https://www.reddit.com` and are not exfiltrated to any other domain. There is no evidence of malicious execution, persistence, privilege escalation, obfuscation, or prompt injection attempts against the agent in any of the provided files.
能力评估
Purpose & Capability
The name/description match the code and SKILL.md: the script performs GET requests to reddit.com and exposes commands for posts, search, and subreddit info. However, the package metadata lists no required env vars or binaries, while the SKILL.md and script rely on REDDIT_SESSION and optional TOKEN_V2 and require Node (a JS script). The omission is an inconsistency (likely sloppy metadata) but not evidence of malicious intent.
Instruction Scope
Runtime instructions are narrowly scoped: they tell the user how to extract reddit_session (and optionally token_v2) from browser cookies, set them as environment variables, and run the CLI. The instructions do not ask the agent to read unrelated files, exfiltrate data, or contact unexpected endpoints; the code only requests reddit.com endpoints. Note: instructing users to copy session cookies is inherently sensitive.
Install Mechanism
There is no install spec (instruction-only), which minimizes installer risk. The repository includes a single Node script; README suggests downloading from raw.githubusercontent.com (a standard host). The package does not declare Node as a required binary despite being a Node script — a minor but relevant omission.
Credentials
The functionality legitimately requires reddit_session and optionally token_v2 cookies, which are sensitive credentials. Those env vars are described in SKILL.md/README and used by the script, but the skill metadata did not list them as required. Storing session cookies in ~/.bashrc persists sensitive credentials in plaintext on disk and increases risk if the machine is compromised; users should understand that these are effectively authentication credentials and treat them accordingly.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and does not ask for system-wide configuration access. It appears to operate only when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install reddit-cli
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /reddit-cli 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Updated version number in SKILL.md from 1.0.0 to 1.0.2 - No other content changes detected
v1.0.1
- Added README.md for improved user documentation. - Updated examples in SKILL.md for clearer, more relevant usage scenarios. - Minor code or documentation fixes in scripts/reddit-cli.js and SKILL.md.
v1.0.0
- Updated skill.
元数据
Slug reddit-cli
版本 1.0.2
许可证
累计安装 21
当前安装数 21
历史版本数 3
常见问题

Reddit Cli 是什么?

Reddit CLI using cookies for authentication. Read posts, search, and get subreddit info. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3872 次。

如何安装 Reddit Cli?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install reddit-cli」即可一键安装,无需额外配置。

Reddit Cli 是免费的吗?

是的,Reddit Cli 完全免费(开源免费),可自由下载、安装和使用。

Reddit Cli 支持哪些平台?

Reddit Cli 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Reddit Cli?

由 kelsia(@kelsia14)开发并维护,当前版本 v1.0.2。

💬 留言讨论