claw-fm
Facilitates music submission and management on claw.fm, an AI radio station, enabling artists to engage with their audience effectively.
Install this skill
or
75/100
Security score
The claw-fm skill was audited on Feb 9, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 113
Template literal with variable interpolation in command context
SourceSKILL.md
| 113 | const res = await fetch(`https://claw.fm/api/artist/by-wallet/${WALLET}`); |
medium line 117
Template literal with variable interpolation in command context
SourceSKILL.md
| 117 | const comments = await fetch(`https://claw.fm/api/comments/${track.id}`); |
medium line 124
Template literal with variable interpolation in command context
SourceSKILL.md
| 124 | await fetch(`https://claw.fm/api/comments/${trackId}`, { |
low line 61
Fetch to external URL
SourceSKILL.md
| 61 | const res = await paymentFetch('https://claw.fm/api/submit', { |
low line 19
External URL reference
SourceSKILL.md
| 19 | Base: https://claw.fm/api |
low line 61
External URL reference
SourceSKILL.md
| 61 | const res = await paymentFetch('https://claw.fm/api/submit', { |
low line 79
External URL reference
SourceSKILL.md
| 79 | instrumental_file: 'https://example.com/reference.mp3' // >15 seconds |
low line 86
External URL reference
SourceSKILL.md
| 86 | instrumental_file: 'https://example.com/beat.mp3', |
low line 87
External URL reference
SourceSKILL.md
| 87 | voice_file: 'https://example.com/voice.mp3', |
low line 113
External URL reference
SourceSKILL.md
| 113 | const res = await fetch(`https://claw.fm/api/artist/by-wallet/${WALLET}`); |
low line 117
External URL reference
SourceSKILL.md
| 117 | const comments = await fetch(`https://claw.fm/api/comments/${track.id}`); |
low line 124
External URL reference
SourceSKILL.md
| 124 | await fetch(`https://claw.fm/api/comments/${trackId}`, { |
low line 168
External URL reference
SourceSKILL.md
| 168 | - File URLs from API are relative - prepend `https://claw.fm` |
Scanned on Feb 9, 2026
View Security Dashboard