PullThatUpJamie

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent instruction-only podcast search skill, with disclosed optional paid API features and payment credentials that users should approve and limit.

The skill appears safe to install as an instruction-only integration. Before using paid features, confirm the cost, use limited payment credentials, and explicitly approve clip creation or podcast ingestion. Avoid sensitive queries when Smart Search is enabled because query text is processed by an external service.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

An agent using the skill could spend service credits or create shareable podcast clip/session outputs if the user asks it to do so.

Why it was flagged

The skill can call external endpoints that create shareable clips and submit podcast ingestion jobs; this is purpose-aligned and disclosed, but users should approve paid or publishing-like actions.

Skill content
Generate shareable audio/video clips with burned-in subtitles ... Ingest new podcasts on demand from any RSS feed.
Recommendation

Use the free tier for exploration, and require explicit user approval before paid ingestion, paid searches, or creating shareable clips.

What this means

If provided, payment credentials or L402 credits could be used for paid Jamie API calls.

Why it was flagged

The artifacts disclose optional payment and L402 authorization credentials for paid endpoints; this is expected for the service, but the credentials enable spending or consuming credits.

Skill content
NWC_CONNECTION_STRING ... for paying Lightning invoices ... JAMIE_L402_CREDENTIAL ... Used as the Authorization header for all paid requests.
Recommendation

Provide credentials only when needed, prefer limited-balance or spending-limited wallet credentials, and do not paste long-lived credentials into unrelated chats.

What this means

Private or sensitive query text could be sent to the external Jamie service and its LLM triage provider when Smart Search is used.

Why it was flagged

Smart Search can route user queries through Jamie's LLM-backed triage flow; this is disclosed and purpose-aligned, but it means query text is processed by an external service path.

Skill content
The triage layer uses `gpt-4o-mini` to classify the query and extract structured entities.
Recommendation

Avoid using Smart Search for sensitive personal or confidential queries unless that external processing is acceptable.