Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add lignertys/reddit-research-skills --skill reddit-leadsgit clone --depth 1 https://github.com/lignertys/reddit-research-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/lignertys/reddit-research-skills/reddit-leads)<a href="https://agentmods.dev/skills/lignertys/reddit-research-skills/reddit-leads"><img src="https://agentmods.dev/badge/skills/lignertys/reddit-research-skills/reddit-leads/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/lignertys/reddit-research-skills/reddit-leads"><img src="https://agentmods.dev/badge/skills/lignertys/reddit-research-skills/reddit-leads.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
- NVIDIA SkillSpector warn
SkillSpector: 6 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Supply Chain · line 131 Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.Fix: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS.
- medium Excessive Agency · line 55 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 60 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Data Exfiltration · line 115 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 131 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
- medium Data Exfiltration · line 290 Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.Fix: Verify the destination URL is trusted and necessary. Remove or replace with documented APIs. Ensure no secrets, tokens, or PII are transmitted.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00071 | $0.03782 |
| Opus 5 | $0.00036 | $0.01891 |
| Sonnet 5 | $0.00014 | $0.00756 |
| Haiku 4.5 | $0.00007 | $0.00378 |
Grade A, and why
reddit-leads scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -X POST "https://reddapi.dev/api/v1/leads" \ How it starts
The opening of the file, as written. The whole thing — 391 lines — stays where its author put it; the contents beside it link to each section on GitHub.
reddit-leads Skill
Overview
AI-powered B2B lead discovery from Reddit. Finds users actively expressing buying intent, scores them 0-100, and classifies by lead type - so you can focus on the warmest prospects first.
Powered by reddapi.dev - The Lead Engine indexes 50K+ subreddits with 20M+ posts and 40M+ comments, using 1024D vector search to match on meaning, not just keywords.
Key Advantage:
- ✅ AI lead scoring - Every post scored 0-100 on buying intent signal strength
- ✅ 5 lead type categories - pain_point, solution_request, complaint, feature_request, comparison
- ✅ Industry inference - AI auto-detects industry/context from discussion content
- ✅ Zero noise - Filters out support tickets, memes, and irrelevant mentions
- ✅ Competitor intelligence - Find users actively complaining about or switching from competitors
Setup
Plan requirement
API access requires a paid plan (Lite $19.9/mo, Starter $49/mo, Pro $99/mo, Team $249/mo). Free gives 3 web-app searches and no API access. Accounts and keys are managed by the user at https://reddapi.dev/account.
Credentials
REDDAPI_API_KEY lives in the environment of the shell that runs the request. Its
value is never needed in this conversation.
The operator sets both variables once, in their own shell, before the agent runs anything. The agent never reads, writes, or transports the key's value:
export REDDAPI_API_KEY=... # from https://reddapi.dev/account
export REDDAPI_AUTH="Authorization: Bearer $REDDAPI_API_KEY"
Every request below sends -H "$REDDAPI_AUTH". No command in this skill names
the key's value, and no example needs it substituted in.
- Reference the key only as
$REDDAPI_API_KEY. Never substitute the literal value into a command, a file, a code block, or a reply. - Never ask the user to paste, type, or send the key in chat. If they send it anyway, don't repeat it back, don't store it in a file, and suggest they rotate it at https://reddapi.dev/account.
- Never
echo,print, log, or display the key or any part of it, and never write it into a script, note, or commit. - If
$REDDAPI_AUTHis not set, stop and say so. Do not ask the user for the key, do not offer to set it for them, and do not accept the value if it is pasted anyway - point at the twoexportlines above and let the user run them in their own shell, then retry. - On a failed request, report the HTTP status and response body only - never the request headers.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 391 lines · 71 tokens per session scan A 04045e769e04
reddit-leads is a skill published in the GitHub repository lignertys/reddit-research-skills (433 stars, last pushed 1mo ago), licensed MIT. It adds 71 tokens to every session and 3,782 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
lead-gen-scan
One-shot buying-intent lead scan across Reddit, Twitter, Instagram, and TikTok. Finds fresh posts from people actively asking for what your product does or frustrated with competitors, qualifies them, and reports prioritized leads for human engagement. Powered by billions of indexed posts via Xpoz MCP.
afrexai-lead-hunter
Enterprise-grade B2B lead generation, enrichment, scoring, and outreach sequencing for AI agents. Find ideal prospects, enrich with verified data, score against your ICP, and generate personalized outreach — all autonomously.
social-lead-gen
Lead generation from social media — find high-intent buyers in live Twitter, Instagram, and Reddit conversations. Auto-researches your product, generates targeted search queries, and discovers people actively looking for solutions you offer. Social selling and prospecting powered by billions of indexed posts.
lead-generation
Lead Generation — Find high-intent buyers in live Twitter, Instagram, and Reddit conversations. Auto-researches your product, generates targeted search queries, and discovers people actively looking for solutions you offer. Social selling and prospecting powered by 1.5B+ indexed posts via Xpoz MCP.
lead-gen
Use when building and qualifying a prospect list before anyone reaches out — a falsifiable ICP, named accounts/contacts from Apollo/ZoomInfo/Clay, deduped against the CRM, tiered by fit+intent+engagement. NOT writing or sending the outreach (that is cold-outreach), NOT tracking the deal after first contact (that is…
biglead
A B2B lead-generation tool for finding companies by industry, product, region, or size, checking information across public sources, and saving contact details and lead records.