rapidapi-launch-assistant

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is a coherent API launch checklist with a small local plan-generation script, but users should manually approve public publishing, outreach, pricing, and credential-related steps.

This skill appears safe for guided API launch planning. Before installing or using it, be ready to manually approve any marketplace publishing, pricing/quota changes, gateway/auth changes, and outreach messages, and avoid exposing raw API keys unless necessary.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If used with tools that can publish or message people, the agent could affect the user's public API listing or outreach campaign.

Why it was flagged

Publishing a listing and contacting prospects are public/business-impacting actions. They are aligned with the skill's launch purpose, but should be confirmed by the user before being performed.

Skill content
Launch acquisition. - Publish listing. - Run first outreach wave and track conversion.
Recommendation

Treat publish, pricing, and outreach steps as drafts until the user explicitly approves them.

What this means

Incorrect handling of API keys or gateway auth settings could expose or break protected endpoints.

Why it was flagged

The workflow involves auth and secret-header configuration, which is expected for API marketplace setup but involves sensitive credentials or account settings.

Skill content
Configure gateway/auth. - Set required secret header forwarding (e.g., `x-api-key`).
Recommendation

Use least-privilege credentials, avoid sharing raw secrets in chat when possible, and confirm auth/header changes before applying them.

What this means

Running the helper can create or overwrite the output markdown file path chosen by the user.

Why it was flagged

The skill includes a user-directed local Python command. The provided script only reads a JSON file and writes a markdown plan, which is proportionate to the stated purpose.

Skill content
Use `scripts/create-launch-plan.py` to generate a launch-plan markdown file from a simple JSON input... `python scripts/create-launch-plan.py input.json launch-plan.md`
Recommendation

Run the script only on intended input files and choose an output path that will not overwrite important files.