Doubleword API

ReviewAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Doubleword batch-API guide/helper, with expected cautions around API-key use, uploading batch data to Doubleword, paid async jobs, and an optional external package.

Use this skill if you intend to work with Doubleword batch inference. Before submitting, verify the JSONL contents, cost estimate, model, and completion window; keep the API key in a secure secret store or environment variable; avoid uploading confidential data unless permitted; and only install the optional autobatcher package after verifying its source.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Submitting a batch can consume Doubleword credits and leave a remote job running until it completes or is cancelled.

Why it was flagged

The skill guides users through remote API operations that create and manage asynchronous batch jobs; this is purpose-aligned, but it can affect a paid account and start long-running work.

Skill content
Create batch using file ID ... Poll status until complete ... Download results from output_file_id
Recommendation

Review the JSONL file, model, completion window, and estimated cost before creating a batch; start with small tests and use the cancel endpoint if needed.

What this means

Anyone with the API key may be able to access the Doubleword account’s batch files, jobs, and credits depending on the key’s permissions.

Why it was flagged

The API workflow requires a Doubleword account key. This is expected for the integration, but the registry metadata does not declare a primary credential or required environment variable.

Skill content
API Key - Create one in the API Keys section of your dashboard ... -H "Authorization: Bearer $DOUBLEWORD_API_KEY"
Recommendation

Store the key in an environment variable or secrets manager, avoid pasting it into shared chats or files, rotate it periodically, and use the least-privileged key available.

What this means

Private prompts, documents, customer data, or other contents placed in the JSONL file will be sent to and processed by the Doubleword service.

Why it was flagged

Batch request files are explicitly uploaded to Doubleword’s external API for processing. This is the intended data flow, but the uploaded prompts and documents may be sensitive.

Skill content
curl https://api.doubleword.ai/v1/files ... -F purpose="batch" ... -F file="@batch_requests.jsonl"
Recommendation

Do not include secrets or regulated data unless approved; review Doubleword’s data handling terms and redact sensitive content where possible.

What this means

Installing the optional package may add third-party code and dependencies to the user’s Python environment.

Why it was flagged

The documentation recommends an optional external Python package without a pinned version. This is not hidden and is related to the batching purpose, but package installation has normal supply-chain risk.

Skill content
Install: `pip install autobatcher`
Recommendation

Verify the package source, use a virtual environment, pin a known version, and skip the optional package if the documented API or console workflow is sufficient.