Reddit Curator

Curates and summarizes top posts daily from your chosen subreddits, filtering by upvotes and keywords, and delivers a clean Reddit digest to email or Telegram.

This skill is plausibly what it says (curates Reddit and delivers digests) but the documentation is inconsistent and asks you to provide highly sensitive credentials. Before installing: 1) Confirm the real source repository and review its code — do not trust the README's clone URL without checking it. 2) Ask the author why README claims 'no auth' while SKILL.md requires full Reddit credentials and why write features (saving posts) are present; require a clear list of OAuth scopes. 3) Prefer creating a dedicated Reddit account and an app with the minimum scopes, and avoid reusing your main Reddit password. 4) Do NOT store credentials in plaintext files on shared machines; use a secrets manager or the platform's secure config. 5) If you need enhanced summaries, provide LLM keys only if you understand billing and data exposure to those providers. If the author cannot resolve the README/manifest inconsistencies or provide a reputable code repo to audit, treat this skill as untrusted.

Type: OpenClaw Skill Name: reddit-curator Version: 1.0.0 The bundle contains a critical contradiction: README.md claims the skill provides 'read-only access... without requiring Reddit API auth,' whereas SKILL.md explicitly instructs the AI agent to collect sensitive Reddit credentials, including the client_id, client_secret, username, and password. This discrepancy suggests a potential bait-and-switch tactic to solicit user credentials under false pretenses. Furthermore, the instructions rely on the agent to handle these credentials without providing verifiable code for encryption or secure storage, increasing the risk of credential exposure.