Is buksan1950/reddit-readonly safe?
https://github.com/openclaw/skills/tree/main/skills/buksan1950/reddit-readonly
This skill provides legitimate read-only access to Reddit through public JSON endpoints with no malicious behavior detected. The code is clean, well-structured, and matches its stated purpose of browsing Reddit content without authentication.
Category Scores
Findings (2)
INFO Sensitive Files Accessed During Session -15 ▶
Monitoring detected access to sensitive files including .env, SSH keys, AWS credentials, and other configuration files. However, analysis indicates this was likely from SSH/system processes during session establishment rather than the skill itself.
INFO Canary Files Accessed But Not Modified -10 ▶
While sensitive canary files were accessed during the audit session, final integrity checks confirm no modifications were made. The access pattern is consistent with normal SSH session initialization rather than malicious exfiltration.