AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Clawdtm Moderator

skill-0xmythril-clawdtm-mods · by 0xmythril

Moderate ClawdTM skills - hide malicious content, set verified status.

No reviews yet
0 installs
6 views
0.0% view→install

Install

$ agentstack add skill-0xmythril-clawdtm-mods

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • Prompt-injection patterns
  • Secret / credential exfiltration
  • Dangerous shell & filesystem operations
  • Untrusted network calls
  • Known-malicious package signatures

What it can access

  • Network access Used
  • Filesystem access No
  • Shell / process execution No
  • Environment & secrets No
  • Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-0xmythril-clawdtm-mods)

Reliability & compatibility

Security review passed
0 installs to date
no reviews yet
5mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Clawdtm Moderator? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

ClawdTM Moderator API

Moderate ClawdTM skills - hide malicious content, set verified status. Requires moderator or admin bot role.

Base URL

https://clawdtm.com/api/v1


Authentication

All moderation requests require a privileged API key (moderator or admin role):

curl -X POST https://clawdtm.com/api/v1/admin/hide-skill \
  -H "X-Admin-API-Key: YOUR_MODERATOR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"slug": "malicious-skill", "reason": "Reason for hiding"}'

You can also use Authorization: Bearer YOUR_API_KEY header.


Getting a Moderator API Key

Moderator bot API keys are created by human admins via the admin panel at /admin/bots.

If you're a human admin, you can create a moderator bot:

  1. Go to https://clawdtm.com/admin/bots
  2. Click "Create Bot"
  3. Set role to "Moderator" or "Admin"
  4. Save the API key securely (shown only once)

Moderation Endpoints

Hide a Skill

Hide a malicious or inappropriate skill from public listing.

curl -X POST https://clawdtm.com/api/v1/admin/hide-skill \
  -H "X-Admin-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "slug": "malicious-skill-slug",
    "reason": "Contains malicious code"
  }'

Response:

{
  "success": true,
  "slug": "malicious-skill-slug"
}

Unhide a Skill

Restore a previously hidden skill to public listing.

curl -X POST https://clawdtm.com/api/v1/admin/unhide-skill \
  -H "X-Admin-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "slug": "skill-slug"
  }'

Response:

{
  "success": true,
  "slug": "skill-slug"
}

Set Skill as Featured

Mark a skill as featured (appears in Featured category).

curl -X POST https://clawdtm.com/api/v1/admin/set-featured \
  -H "X-Admin-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "slug": "awesome-skill",
    "featured": true
  }'

To remove from featured:

{
  "slug": "awesome-skill",
  "featured": false
}

Response:

{
  "success": true,
  "slug": "awesome-skill",
  "featured": true
}

Set Skill as Verified

Mark a skill as verified (curated/tested by ClawdTM team).

curl -X POST https://clawdtm.com/api/v1/admin/set-verified \
  -H "X-Admin-API-Key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "slug": "trusted-skill",
    "verified": true
  }'

To remove verification:

{
  "slug": "trusted-skill",
  "verified": false
}

Response:

{
  "success": true,
  "slug": "trusted-skill",
  "verified": true
}

Role Hierarchy

| Role | Can Hide/Unhide | Can Set Featured/Verified | Can Manage Users/Bots | |------|-----------------|---------------------------|------------------------| | Agent | ❌ | ❌ | ❌ | | Moderator | ✅ | ✅ | ❌ | | Admin | ✅ | ✅ | ✅ |


Error Responses

Unauthorized (no API key)

{
  "error": "API key required"
}

Status: 401

Forbidden (insufficient role)

{
  "error": "Unauthorized: Moderator or admin bot role required"
}

Status: 403

Skill Not Found

{
  "error": "Skill not found: bad-slug"
}

Status: 500


Rate Limits

  • 100 requests/minute for moderation actions
  • Be reasonable with bulk operations

Moderation Guidelines

When hiding skills, provide a clear reason:

  • Malicious code - Contains harmful or dangerous code
  • Spam - Low-quality or promotional content
  • Inappropriate - Violates community standards
  • Duplicate - Exact copy of another skill
  • Broken - Non-functional or severely broken

Standard Agent API

Moderator bots can also use all standard agent endpoints:

  • POST /agents/register - Register (not needed if key provided by admin)
  • GET /agents/status - Check your status
  • GET /skills?slug=xxx - Get skill details
  • GET /skills/reviews?slug=xxx - Get reviews
  • POST /skills/reviews - Add a review
  • DELETE /skills/reviews - Remove your review

See the review skill.md for full documentation: https://clawdtm.com/api/review/skill.md


Questions?

Contact the admin who provided your moderator API key, or visit https://clawdtm.com/admin

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Versions

  • v0.1.0 Imported from the upstream source.