reddit-api
Integrates Reddit data into applications using PRAW and Snoowrap for fetching posts, comments, and user data.
Install this skill
Security score
The reddit-api skill was audited on Jun 8, 2026 and we found 29 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 241 | console.log(`${post.title} - ${post.score} upvotes`); |
Template literal with variable interpolation in command context
| 259 | console.log(`${comment.author.name}: ${comment.body.slice(0, 100)}`); |
Template literal with variable interpolation in command context
| 378 | const auth = Buffer.from(`${this.clientId}:${this.clientSecret}`).toString("base64"); |
Template literal with variable interpolation in command context
| 383 | Authorization: `Basic ${auth}`, |
Template literal with variable interpolation in command context
| 398 | `https://oauth.reddit.com/r/${subreddit}/${sort}?limit=${limit}`, |
Template literal with variable interpolation in command context
| 401 | Authorization: `Bearer ${this.accessToken}`, |
Fetch to external URL
| 380 | const response = await fetch("https://www.reddit.com/api/v1/access_token", { |
Access to .env file
| 36 | # .env |
Access to .env file
| 85 | env_file = ".env" |
Access to .env file
| 222 | clientId: process.env.REDDIT_CLIENT_ID!, |
Access to .env file
| 223 | clientSecret: process.env.REDDIT_CLIENT_SECRET!, |
Access to .env file
| 224 | username: process.env.REDDIT_USERNAME!, |
Access to .env file
| 225 | password: process.env.REDDIT_PASSWORD!, |
Access to .env file
| 504 | ├── .env |
External URL reference
| 14 | **Sources:** [Reddit API Docs](https://www.reddit.com/dev/api/) | [OAuth2 Wiki](https://github.com/reddit-archive/reddit/wiki/oauth2) | [PRAW Docs](https://praw.readthedocs.io/) |
External URL reference
| 22 | 1. Go to https://www.reddit.com/prefs/apps |
External URL reference
| 30 | - **Redirect URI**: `http://localhost:8000/callback` (for dev) |
External URL reference
| 158 | url="https://example.com" |
External URL reference
| 275 | url: "https://example.com", |
External URL reference
| 309 | "https://www.reddit.com/api/v1/access_token", |
External URL reference
| 327 | f"https://oauth.reddit.com/r/{subreddit}/{sort}", |
External URL reference
| 380 | const response = await fetch("https://www.reddit.com/api/v1/access_token", { |
External URL reference
| 398 | `https://oauth.reddit.com/r/${subreddit}/${sort}?limit=${limit}`, |
External URL reference
| 430 | REDIRECT_URI = "http://localhost:8000/callback" |
External URL reference
| 438 | f"https://www.reddit.com/api/v1/authorize" |
External URL reference
| 457 | "https://www.reddit.com/api/v1/access_token", |
External URL reference
| 489 | Full list: https://www.reddit.com/api/v1/scopes |
External URL reference
| 585 | | Auth token | `POST https://www.reddit.com/api/v1/access_token` | |
External URL reference
| 586 | | API requests | `https://oauth.reddit.com/...` | |