tone-rewriter
PassAudited by ClawScan on May 10, 2026.
Overview
This is a straightforward paid tone-rewriting skill, but users should notice it requires an external CLI login/payment flow and sends submitted text to a third-party endpoint.
This skill appears coherent and purpose-aligned. Before installing or using it, verify the `awal` npm CLI, understand that each request costs $0.01 USDC, and do not submit sensitive text unless you trust the external rewriting service.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Installing a global CLI gives that package code execution during install/use, so users need to trust the package source.
The skill depends on a globally installed npm CLI and login flow that are not represented as an install spec. The version is pinned and the step is disclosed, so this is a supply-chain trust note rather than a concern.
npm install -g awal@2.0.3 awal auth login
Verify the `awal` npm package and publisher before installing, and prefer an isolated environment if unsure.
Using the skill can spend USDC from the configured x402/awal account.
The skill uses an authenticated payment flow for each request. This is clearly disclosed and aligned with the paid service, but it does involve account/payment authority.
Pay $0.01 USDC per request via x402.
Confirm you are comfortable with the per-request charge and monitor usage if the agent may invoke the skill repeatedly.
Text submitted for rewriting may be processed by the external service.
The documented workflow sends user-provided text to a third-party hosted endpoint. This is expected for a rewriting service, but the artifacts do not describe retention or privacy handling.
Endpoint: `https://anicca-proxy-production.up.railway.app/api/x402/tone-rewriter`
Avoid submitting confidential, regulated, or sensitive personal text unless you trust the endpoint and its data handling.