Read the Agent-Reach code so you don't have to learn the hard way.
The README is doing PR work on "free." Exa and Jina are freemium with cliffs the README doesn't version. Groq Whisper is the transcribe default and needs your own key. Reddit has no zero-config
headless path — the docstring is right, ignore it and you'll spend a Saturday debugging throttled public JSON.
Security is actually honest. Argv-list subprocess everywhere, no shell=True, no pickle, no eval, yaml.load is safe_load, MCP server is clean, SECURITY.md with private disclosure, install is home-scoped. The one real attack surface is the cookie extraction TOCTOU window — briefly readable by any same-UID process between tempfile creation and deletion. Real, but narrow.
The structural risk nobody talks about: one maintainer, 32 of 34 commits, no CODEOWNERS. The Playwright browser binary download is
the real surprise even if you never use OpenCLI. Pin to a commit SHA, not the moving main zip. Sandbox-test in a throwaway container.
Promising. Sandbox-test, then watch.