reddit-insights

SUSPICIOUS. The skill's purpose is coherent, and the requested API credential is proportionate for a Reddit search service, but the install path is not internally consistent with the vendor's current official documentation. The key risk is an unverified `npx`-installed MCP package that receives the API key. This looks more like install/provenance risk than confirmed malware, but it is too inconsistent to rate benign.