Security audit
Security checks across malware telemetry and agentic risk
This skill is a broad but coherent API gateway for user-approved third-party integrations; it carries real data-sharing risk but does not show hidden or malicious behavior.
Install only if you trust Maton with the connected services. Use the narrowest OAuth scopes, confirm every write, trigger, destination, and deletion with exact resource IDs, avoid broad Slack or webhook scopes, and do not forward email, payment, meeting, or location data unless that specific data sharing is intended.
import json, os, urllib.request
event = json.loads(os.environ["EVENT_JSON"])
data = json.dumps({"channel": "C0123456789", "text": f"New email: {event['snippet']}"}).encode()
req = urllib.request.Request("https://api.maton.ai/slack/api/chat.postMessage", data=data, method="POST")
req.add_header("Authorization", f"Bearer {os.environ['MATON_API_KEY']}")
req.add_header("Content-Type", "application/json")
urllib.request.urlopen(req)65/65 vendors flagged this skill as clean.
No suspicious patterns detected.