Content Multiply Pro

ReviewAudited by ClawScan on May 17, 2026.

Overview

This content-repurposing skill is mostly coherent, but it relies on an unknown ngrok web API and tells the agent to buy credits without clear user approval or data-handling details.

Before installing, confirm who operates the API, what data it stores, and whether charges can occur. Do not let the agent buy credits automatically, and avoid sending private drafts, transcripts, customer data, or confidential business material to the service unless you trust its data-handling terms.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent could attempt to spend money or enter a payment flow without a clearly defined confirmation step.

Why it was flagged

This directs the agent toward a purchase flow based on an API response, but the artifacts do not specify user approval, pricing, spending limits, or safeguards.

Skill content
Buy credits at /buy if the API returns a 402 response.
Recommendation

Require explicit user approval before any purchase, show the cost and vendor, and do not allow automatic credit buying.

What this means

Draft posts, transcripts, URLs, or other source material may be sent to an unknown external service.

Why it was flagged

The skill appears to use an external web API for processing user-provided source content, but provides no information about the operator, data handling, retention, or boundaries for what is sent.

Skill content
Provide your agent with the source content... Uses a web-based content API at https://extant-torrie-nonrepealable.ngrok-free.dev.
Recommendation

Use only public or non-sensitive content unless the provider’s identity, privacy practices, and data-use terms are clear; ask for confirmation before sending user content externally.