diff --git a/binarylane/lib/common.sh b/binarylane/lib/common.sh
index f7cb694c..d09aed10 100644
--- a/binarylane/lib/common.sh
+++ b/binarylane/lib/common.sh
@@ -81,11 +81,7 @@ ensure_binarylane_token() {
         return 1
     fi
     mkdir -p "$config_dir"
-    cat > "$config_file" << EOF
-{
-  "api_token": "$api_token"
-}
-EOF
+    printf '{\n  "api_token": "%s"\n}\n' "$(json_escape "$api_token")" > "$config_file"
     chmod 600 "$config_file"
     log_info "API token saved to $config_file"
 }
diff --git a/fly/lib/common.sh b/fly/lib/common.sh
index 4aa2b2dc..c6793e63 100644
--- a/fly/lib/common.sh
+++ b/fly/lib/common.sh
@@ -74,11 +74,7 @@ _save_fly_token() {
     local config_dir="$HOME/.config/spawn"
     local config_file="$config_dir/fly.json"
     mkdir -p "$config_dir"
-    cat > "$config_file" << EOF
-{
-  "token": "$token"
-}
-EOF
+    printf '{\n  "token": "%s"\n}\n' "$(json_escape "$token")" > "$config_file"
     chmod 600 "$config_file"
 }
 
diff --git a/fly/openclaw.sh b/fly/openclaw.sh
index 41f5a8ea..ac32d601 100644
--- a/fly/openclaw.sh
+++ b/fly/openclaw.sh
@@ -58,26 +58,7 @@ GATEWAY_TOKEN=$(openssl rand -hex 16)
 
 OPENCLAW_CONFIG_TEMP=$(mktemp)
 chmod 600 "$OPENCLAW_CONFIG_TEMP"
-cat > "$OPENCLAW_CONFIG_TEMP" << EOF
-{
-  "env": {
-    "OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}"
-  },
-  "gateway": {
-    "mode": "local",
-    "auth": {
-      "token": "${GATEWAY_TOKEN}"
-    }
-  },
-  "agents": {
-    "defaults": {
-      "model": {
-        "primary": "openrouter/${MODEL_ID}"
-      }
-    }
-  }
-}
-EOF
+printf '{\n  "env": {\n    "OPENROUTER_API_KEY": "%s"\n  },\n  "gateway": {\n    "mode": "local",\n    "auth": {\n      "token": "%s"\n    }\n  },\n  "agents": {\n    "defaults": {\n      "model": {\n        "primary": "openrouter/%s"\n      }\n    }\n  }\n}\n' "$(json_escape "${OPENROUTER_API_KEY}")" "$(json_escape "${GATEWAY_TOKEN}")" "$(json_escape "${MODEL_ID}")" > "$OPENCLAW_CONFIG_TEMP"
 
 upload_file "$OPENCLAW_CONFIG_TEMP" "/root/.openclaw/openclaw.json"
 rm "$OPENCLAW_CONFIG_TEMP"
diff --git a/kamatera/lib/common.sh b/kamatera/lib/common.sh
index fb183b89..9025f74c 100644
--- a/kamatera/lib/common.sh
+++ b/kamatera/lib/common.sh
@@ -159,12 +159,7 @@ print(d.get('api_secret', ''))
     log_info "API credentials validated"
 
     mkdir -p "$config_dir"
-    cat > "$config_file" << EOF
-{
-  "api_client_id": "$client_id",
-  "api_secret": "$secret"
-}
-EOF
+    printf '{\n  "api_client_id": "%s",\n  "api_secret": "%s"\n}\n' "$(json_escape "$client_id")" "$(json_escape "$secret")" > "$config_file"
     chmod 600 "$config_file"
     log_info "API credentials saved to $config_file"
 }
diff --git a/ovh/lib/common.sh b/ovh/lib/common.sh
index 474859d3..f5e709ae 100644
--- a/ovh/lib/common.sh
+++ b/ovh/lib/common.sh
@@ -170,14 +170,9 @@ for k in ('application_key','application_secret','consumer_key','project_id'):
     local config_dir
     config_dir=$(dirname "${config_file}")
     mkdir -p "${config_dir}"
-    cat > "${config_file}" << EOF
-{
-  "application_key": "${app_key}",
-  "application_secret": "${app_secret}",
-  "consumer_key": "${consumer_key}",
-  "project_id": "${project_id}"
-}
-EOF
+    printf '{\n  "application_key": "%s",\n  "application_secret": "%s",\n  "consumer_key": "%s",\n  "project_id": "%s"\n}\n' \
+        "$(json_escape "${app_key}")" "$(json_escape "${app_secret}")" \
+        "$(json_escape "${consumer_key}")" "$(json_escape "${project_id}")" > "${config_file}"
     chmod 600 "${config_file}"
     log_info "OVHcloud credentials saved to ${config_file}"
     return 0
diff --git a/railway/lib/common.sh b/railway/lib/common.sh
index 60b5e6b7..8173d689 100644
--- a/railway/lib/common.sh
+++ b/railway/lib/common.sh
@@ -108,11 +108,7 @@ ensure_railway_token() {
     # Save to config file
     export RAILWAY_TOKEN="$token"
     mkdir -p "$config_dir"
-    cat > "$config_file" << EOF
-{
-  "token": "$token"
-}
-EOF
+    printf '{\n  "token": "%s"\n}\n' "$(json_escape "$token")" > "$config_file"
     chmod 600 "$config_file"
     log_info "Token saved to $config_file"
 }
diff --git a/runpod/lib/common.sh b/runpod/lib/common.sh
index 75aaa7c0..dd7901cd 100644
--- a/runpod/lib/common.sh
+++ b/runpod/lib/common.sh
@@ -45,7 +45,8 @@ print(json.dumps({'query': q}))
 
     curl -s -X POST \
         -H "Content-Type: application/json" \
-        "${RUNPOD_GRAPHQL_URL}?api_key=${RUNPOD_API_KEY}" \
+        -H "api-key: ${RUNPOD_API_KEY}" \
+        "${RUNPOD_GRAPHQL_URL}" \
         -d "${body}"
 }
 
diff --git a/shared/common.sh b/shared/common.sh
index ade40fe3..56000852 100644
--- a/shared/common.sh
+++ b/shared/common.sh
@@ -992,7 +992,7 @@ _update_retry_interval() {
         current_interval="${max_interval}"
     fi
 
-    eval "${interval_var}=${current_interval}"
+    printf -v "${interval_var}" '%s' "${current_interval}"
 }
 
 # Helper to extract HTTP status code and response body from curl output
@@ -1520,22 +1520,7 @@ setup_claude_code_config() {
 
     # Create settings.json
     local settings_json
-    settings_json=$(cat << EOF
-{
-  "theme": "dark",
-  "editor": "vim",
-  "env": {
-    "CLAUDE_CODE_ENABLE_TELEMETRY": "0",
-    "ANTHROPIC_BASE_URL": "https://openrouter.ai/api",
-    "ANTHROPIC_AUTH_TOKEN": "${openrouter_key}"
-  },
-  "permissions": {
-    "defaultMode": "bypassPermissions",
-    "dangerouslySkipPermissions": true
-  }
-}
-EOF
-)
+    settings_json=$(printf '{\n  "theme": "dark",\n  "editor": "vim",\n  "env": {\n    "CLAUDE_CODE_ENABLE_TELEMETRY": "0",\n    "ANTHROPIC_BASE_URL": "https://openrouter.ai/api",\n    "ANTHROPIC_AUTH_TOKEN": "%s"\n  },\n  "permissions": {\n    "defaultMode": "bypassPermissions",\n    "dangerouslySkipPermissions": true\n  }\n}\n' "$(json_escape "${openrouter_key}")")
     upload_config_file "${upload_callback}" "${run_callback}" "${settings_json}" "~/.claude/settings.json"
 
     # Create .claude.json global state
@@ -1593,27 +1578,7 @@ setup_openclaw_config() {
 
     # Create openclaw.json config
     local openclaw_json
-    openclaw_json=$(cat << EOF
-{
-  "env": {
-    "OPENROUTER_API_KEY": "${openrouter_key}"
-  },
-  "gateway": {
-    "mode": "local",
-    "auth": {
-      "token": "${gateway_token}"
-    }
-  },
-  "agents": {
-    "defaults": {
-      "model": {
-        "primary": "openrouter/${model_id}"
-      }
-    }
-  }
-}
-EOF
-)
+    openclaw_json=$(printf '{\n  "env": {\n    "OPENROUTER_API_KEY": "%s"\n  },\n  "gateway": {\n    "mode": "local",\n    "auth": {\n      "token": "%s"\n    }\n  },\n  "agents": {\n    "defaults": {\n      "model": {\n        "primary": "openrouter/%s"\n      }\n    }\n  }\n}\n' "$(json_escape "${openrouter_key}")" "$(json_escape "${gateway_token}")" "$(json_escape "${model_id}")")
     upload_config_file "${upload_callback}" "${run_callback}" "${openclaw_json}" "~/.openclaw/openclaw.json"
 }
 
diff --git a/upcloud/lib/common.sh b/upcloud/lib/common.sh
index a1d595e5..92cc73f1 100644
--- a/upcloud/lib/common.sh
+++ b/upcloud/lib/common.sh
@@ -118,12 +118,7 @@ print(d.get('password', ''))
     local config_dir
     config_dir=$(dirname "${config_file}")
     mkdir -p "${config_dir}"
-    cat > "${config_file}" << EOF
-{
-  "username": "${username}",
-  "password": "${password}"
-}
-EOF
+    printf '{\n  "username": "%s",\n  "password": "%s"\n}\n' "$(json_escape "${username}")" "$(json_escape "${password}")" > "${config_file}"
     chmod 600 "${config_file}"
     log_info "Credentials saved to ${config_file}"
 }