reddit-api
Integrates Reddit data into applications using PRAW and Snoowrap for fetching posts, comments, and user data.
Install this skill
Security score
The reddit-api skill was audited on Feb 12, 2026 and we found 29 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 239 | console.log(`${post.title} - ${post.score} upvotes`); |
Template literal with variable interpolation in command context
| 257 | console.log(`${comment.author.name}: ${comment.body.slice(0, 100)}`); |
Template literal with variable interpolation in command context
| 376 | const auth = Buffer.from(`${this.clientId}:${this.clientSecret}`).toString("base64"); |
Template literal with variable interpolation in command context
| 381 | Authorization: `Basic ${auth}`, |
Template literal with variable interpolation in command context
| 396 | `https://oauth.reddit.com/r/${subreddit}/${sort}?limit=${limit}`, |
Template literal with variable interpolation in command context
| 399 | Authorization: `Bearer ${this.accessToken}`, |
Fetch to external URL
| 378 | const response = await fetch("https://www.reddit.com/api/v1/access_token", { |
Access to .env file
| 34 | # .env |
Access to .env file
| 83 | env_file = ".env" |
Access to .env file
| 220 | clientId: process.env.REDDIT_CLIENT_ID!, |
Access to .env file
| 221 | clientSecret: process.env.REDDIT_CLIENT_SECRET!, |
Access to .env file
| 222 | username: process.env.REDDIT_USERNAME!, |
Access to .env file
| 223 | password: process.env.REDDIT_PASSWORD!, |
Access to .env file
| 502 | ├── .env |
External URL reference
| 12 | **Sources:** [Reddit API Docs](https://www.reddit.com/dev/api/) | [OAuth2 Wiki](https://github.com/reddit-archive/reddit/wiki/oauth2) | [PRAW Docs](https://praw.readthedocs.io/) |
External URL reference
| 20 | 1. Go to https://www.reddit.com/prefs/apps |
External URL reference
| 28 | - **Redirect URI**: `http://localhost:8000/callback` (for dev) |
External URL reference
| 156 | url="https://example.com" |
External URL reference
| 273 | url: "https://example.com", |
External URL reference
| 307 | "https://www.reddit.com/api/v1/access_token", |
External URL reference
| 325 | f"https://oauth.reddit.com/r/{subreddit}/{sort}", |
External URL reference
| 378 | const response = await fetch("https://www.reddit.com/api/v1/access_token", { |
External URL reference
| 396 | `https://oauth.reddit.com/r/${subreddit}/${sort}?limit=${limit}`, |
External URL reference
| 428 | REDIRECT_URI = "http://localhost:8000/callback" |
External URL reference
| 436 | f"https://www.reddit.com/api/v1/authorize" |
External URL reference
| 455 | "https://www.reddit.com/api/v1/access_token", |
External URL reference
| 487 | Full list: https://www.reddit.com/api/v1/scopes |
External URL reference
| 583 | | Auth token | `POST https://www.reddit.com/api/v1/access_token` | |
External URL reference
| 584 | | API requests | `https://oauth.reddit.com/...` | |