Modern URL shortening with QR codes and detailed analytics
PassAudited by ClawScan on May 1, 2026.
Overview
This looks like a straightforward Jo4 API instruction skill, but it uses an API key and can create, update, or delete your short links.
Before installing, be comfortable giving the agent access to your Jo4 API key. Use the skill for clearly requested link creation or analytics tasks, and require explicit confirmation before updating or deleting existing short links.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
An agent using this skill can authenticate to Jo4 as you for protected operations such as creating links, listing links, reading analytics, and managing existing URLs.
The skill requires a Jo4 API key for protected account operations; this is expected for the service, but it grants delegated access to the user's Jo4 account.
All protected endpoints require an API key. Set your API key as an environment variable: export JO4_API_KEY="your-api-key"
Use a dedicated or limited-scope API key if Jo4 supports it, keep the key private, and revoke or rotate it if you no longer trust the skill or environment.
If used incorrectly, the agent could redirect an existing short link to a new destination or delete a link from the user's Jo4 account.
The documented API includes update and delete operations for short URLs; these are purpose-aligned but can change or remove live public links.
curl -X PUT "https://jo4-api.jo4.io/api/v1/protected/url/{id}" ... curl -X DELETE "https://jo4-api.jo4.io/api/v1/protected/url/{id}"Only allow update or delete actions when you have clearly specified the exact link ID or slug and have reviewed the intended change.