Is toneden safe to install?

SaferSkills independently audited toneden (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

clawhub-skills/toneden/SKILL.md · 1 file

clawhub-skills/toneden/SKILL.md8.2 KB · Markdown

name: toneden

description: ToneDen API integration with managed OAuth. Create smart links, manage ad campaigns, track fan engagement, monitor social unlocks and contest entries. Use this skill when users want to promote music, create marketing links, run advertising campaigns, or analyze fan engagement metrics.

ToneDen

Music marketing and fan engagement from chat -- create smart links, run ad campaigns, track social unlocks, and analyze performance metrics.

Powered by ClawLink, an integration hub for OpenClaw that handles hosted OAuth flows and credentials so you don't need to configure ToneDen API access yourself.

Setup in 3 Steps

Step 1: Install	Step 2: Pair Account	Step 3: Connect ToneDen
		App-specific connection GIF coming soon
Run the install command in OpenClaw	Sign in and approve the device	Open the dashboard and connect ToneDen

How It Works

┌─────────────────┐     ┌──────────────┐     ┌──────────────────┐
│   OpenClaw      │────▶│   ClawLink   │────▶│  ToneDen API     │
│   (User Chat)   │     │   (OAuth)    │     │                  │
└─────────────────┘     └──────────────┘     └──────────────────┘

Install

openclaw plugins install clawhub:clawlink-plugin
openclaw config set tools.alsoAllow '["clawlink-plugin"]' --strict-json
openclaw gateway restart

Quick Start

Get your user profile: toneden_get_user -- verify your ToneDen connection.
Create a smart link: toneden_create_link -- generate a music, podcast, or event link.
Check link insights: toneden_get_link_insights -- view clicks and engagement metrics.

Authentication

ToneDen uses managed OAuth via ClawLink. No API keys needed. Connect your ToneDen account at claw-link.dev/dashboard?add=toneden and authorize access through the hosted flow.

Connection Management

List connections: clawlink_list_integrations -- confirm ToneDen is connected.

Verify: Call toneden_get_user to test access.

Reconnect: If you see auth errors, reconnect at claw-link.dev/dashboard?add=toneden.

Security & Permissions

Read operations (get links, insights, attachments) run safely without confirmation. Write operations (create, update) require confirmation. Delete operations are marked as high-impact and irreversible.

Tool Reference

Link Operations

Tool	Description	Mode
`toneden_create_link`	Create a smart link (music, podcast, event, tour, fundraiser, etc.)	Write
`toneden_get_link`	Retrieve a specific link by ID	Read
`toneden_delete_link`	Permanently delete a link	Write
`toneden_expand_link_template`	Expand a link template with tracking pixels and service links	Read
`toneden_validate_link_path`	Check if a link path/subdomain is unique and valid	Read

Link Insights

Tool	Description	Mode
`toneden_get_link_insights`	Get detailed metrics (clicks, clickthroughs, email clicks)	Read
`toneden_get_link_insights_overview`	Get aggregated metrics across platforms	Read

Advertising Campaign Operations

Tool	Description	Mode
`toneden_create_advertising_campaign`	Create an ad campaign on Facebook or Google	Write
`toneden_get_advertising_campaign`	Retrieve a specific campaign by ID	Read
`toneden_delete_advertising_campaign`	Permanently delete an ad campaign	Write
`toneden_get_advertising_campaign_insights`	Get performance insights for a campaign	Read
`toneden_get_advertising_campaign_creative_insights`	Get creative performance insights	Read

Tool	Description	Mode
`toneden_create_attachment`	Create a social unlock or contest attachment	Write
`toneden_get_attachment`	Retrieve an attachment by ID	Read
`toneden_update_attachment`	Update an existing attachment	Write
`toneden_list_user_attachments`	List all attachments for a user	Read
`toneden_get_attachment_entries_time_series`	Get time-series entry statistics	Read
`toneden_get_attachment_entries_totals`	Get aggregate entry counts	Read
`toneden_get_attachment_unlocks_by_platform`	Get unlock counts broken down by platform	Read
`toneden_get_attachment_unlocks_time_series`	Get time-series unlock statistics	Read

Playbook Campaign Operations

Tool	Description	Mode
`toneden_list_playbook_campaigns`	List all playbook campaigns	Read
`toneden_update_playbook_campaign`	Update a playbook campaign by ID	Write
`toneden_delete_playbook_campaign`	Permanently delete a playbook campaign	Write

User Operations

Tool	Description	Mode
`toneden_get_user`	Retrieve user profile information	Read
`toneden_update_user`	Update user profile details	Write
`toneden_list_user_lists`	List user's advertising custom audiences	Read

Code Examples

Create a music smart link

{
  "tool": "toneden_create_link",
  "args": {
    "target_type": "music",
    "url": "https://open.spotify.com/track/abc123"
  }
}

Get link performance insights

{
  "tool": "toneden_get_link_insights",
  "args": { "link_id": "link123" }
}

Create an advertising campaign

{
  "tool": "toneden_create_advertising_campaign",
  "args": {
    "platform": "facebook",
    "budget": 50,
    "name": "New Single Promo"
  }
}

Check attachment unlocks by platform

{
  "tool": "toneden_get_attachment_unlocks_by_platform",
  "args": { "attachment_id": "att456" }
}

Discovery Workflow

Call clawlink_list_integrations to confirm toneden is connected.
Call clawlink_list_tools --integration toneden to see the live catalog.
Call toneden_get_user to verify your account.
Use link and campaign tools to manage your music marketing.

Execution Workflow

Read Flow:  User asks for insights → clawlink resolves connection → ToneDen API → metrics displayed
Write Flow: User wants to create link → confirmation prompt → clawlink resolves connection → ToneDen API → link created

Notes

Some accounts may not have advertising access; non-2xx responses are returned for observability.
ToneDen's public docs do not expose the full request body schema for playbook campaign updates.
Link types include: music, podcast, livestream, event, tour, biglink, fundraiser, smartlink, and custom.

Error Handling

Status / Error	Meaning
401 Unauthorized	Token expired; reconnect at the dashboard
403 Forbidden	Account lacks advertising access
404 Not Found	Invalid link, campaign, or attachment ID

Troubleshooting

Tools Not Visible

Run openclaw gateway restart after installing the plugin. Start a fresh chat session.

Advertising Access Denied

Verify your ToneDen plan includes advertising features. Some endpoints return non-2xx for accounts without ad access.

Resources

ToneDen API Docs: https://www.toneden.io
ClawLink: https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=toneden
ClawLink Docs: https://docs.claw-link.dev/openclaw

Powered by [ClawLink](https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=toneden) -- an integration hub for OpenClaw

toneden— agent skill

Is toneden safe to install?

ToneDen

Setup in 3 Steps

How It Works

Install

Quick Start

Authentication

Connection Management

Security & Permissions

Tool Reference

Link Operations

Link Insights

Advertising Campaign Operations

Playbook Campaign Operations

User Operations

Code Examples

Discovery Workflow

Execution Workflow

Notes

Error Handling

Troubleshooting

Tools Not Visible

Advertising Access Denied

Resources

Audit the pieces. Scan the whole. Decide.

Is toneden safe to install?

ToneDen

Setup in 3 Steps

How It Works

Install

Quick Start

Authentication

Connection Management

Security & Permissions

Tool Reference

Link Operations

Link Insights

Advertising Campaign Operations

Attachment (Social Unlock) Operations

Playbook Campaign Operations

User Operations

Code Examples

Discovery Workflow

Execution Workflow

Notes

Error Handling

Troubleshooting

Tools Not Visible

Advertising Access Denied

Resources

Audit the pieces. Scan the whole. Decide.