scrapesocial-reddit

SUSPICIOUS. The skill's stated Reddit research purpose is plausible, and the requested API key is proportionate, but the install/auth flow is not internally consistent with the vendor's reported official CLI. Because it installs a differently named package and forwards a real API key into that non-verified CLI, this is a high supply-chain and credential-forwarding risk rather than a benign documentation skill.