js-reddit-ops-skill SKILL.md skillA
js-reddit-ops-skill from imjszhang/js-eyes is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add imjszhang/js-eyes/js-reddit-ops-skill@v3.8.0Pins v3.8.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- imjszhang/js-eyes
- Path
skills/js-reddit-ops-skill/SKILL.md- Versions recorded
- 5
- Latest version
- v3.8.0, committed Aug 3, 2026
- First version recorded
- May 4, 2026
- Size
- 36,069 bytes
- Repository stars
- 45
- License
- MIT
Reddit 内容只读 + 浏览器导航 skill：帖子详情 / subreddit 列表 / 搜索 / 用户主页 / 收件箱 / 主 feed，DOM/API 双模式（auto 默认 DOM 优先 fallback API），浏览器侧仅 location.assign 改 URL。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# js-reddit-ops-skill 面向 reddit.com 的**只读 + 仅改自身浏览器 URL**的 skill。从 v3.0 起切到 `PAGE_PROFILES + Bridges + Session` 架构，参考 [`js-wechat-mp-ops-skill`](../js-wechat-mp-ops-skill/SKILL.md) 的设计取舍： - **数据获取**：READ 数据优先走 reddit 公开 JSON 端点（`*.json` / `oauth.reddit.com`），与浏览器同源、复用 cookie；DOM 解析（`lib/redditUtils.js`）保留为兜底 - **双前端兼容**：bridge 内 `detectFrontend()` 区分 shreddit（新版）/ old.reddit（旧版）；JSON 主路径与前端无关 - **安全分级**：只做 READ + INTERACTIVE 两档，**永不**做 DESTRUCTIVE（不投票 / 不评论 / 不发帖 / 不订阅 / 不发私信 / 不举报） ## 依赖与前置 - Node.js 22+、JS Eyes 2.8.5+；**JS Eyes Server** 已启动（`js-eyes server start`） - **浏览器扩展**：已安装并连上 server - **登录态（可选）**：浏览器里已经人工登录 reddit.com（本 skill 不做任何登录自动化）；未登录可调 READ 公开内容；登录后可调 inbox / 个人 saved/upvoted 等 tab - **任意 reddit.com tab 即可**：READ 工具默认 `navigateOnReuse=false / reuseAnyRedditTab=true`，bridge 在任意 reddit.com tab 里 fetch 同源 JSON 端点；用户当前 tab 不会被切走 - **Raw Eval**：bridge 首次注入需要宿主设置 `security.allowRawEval: true`；JS Eyes 2.5+ 会把该设置同步到扩展，扩展存储中的显式 `false` 仍可强制关闭 - **Chrome**：要求 135+；Chrome 138+ 还需开启浏览器控制的 **Allow User Scripts** ## 安全红线（READ / INTERACTIVE / DESTRUCTIVE） 本 skill 的所有工具都会被归入以下三档之一。审计界线按「是否改 reddit 业务数据」而非「是否触网」来划： ### READ（默认档） 纯读，不改任何 DOM、不改 URL、不触发任何业务写操作。 …
Read the whole file at its exact version.
How to install
mdr add imjszhang/js-eyes/js-reddit-ops-skill@sha256:e44e8a767f7fb288The line at the top of this page pins the label v3.8.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_qiijaylkapzxtt72)
4 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between May 4, 2026 and Aug 3, 2026, about one every 23 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v3.8.0 latest | 2026-08-03 | f5e9936 | 36,069 B | A | view · diff |
| v3.8.0 | 2026-07-26 | 2d8e74d | 36,137 B | A | view · diff |
| v3.8.0 | 2026-07-25 | 024f9ee | 36,139 B | A | view · diff |
| v3.8.0 | 2026-05-04 | 5722cef | 36,129 B | A | view · diff |
| v3.8.0 | 2026-05-04 | 97577c1 | 35,751 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (36069 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
imjszhang/js-eyes · 45 stars · license MIT · pushed 2026-11-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_qiijaylkapzxtt72 GET https://markdownregistry.com/api/v1/resolve?ref=imjszhang/js-eyes/js-reddit-ops-skill GET https://markdownregistry.com/api/v1/blob/e44e8a767f7fb2880f4c38d02217b2171c513f2a723aa6622dd7d6434b0f3320
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.