ClawHub

Basecamp

v1.0.2

Basecamp API integration with managed OAuth. Manage projects, to-dos, messages, schedules, documents, and team collaboration. Use this skill when users want to create and manage projects, to-do lists, schedule events, or collaborate with teams in Basecamp. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 5· 3.7k·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description claim Basecamp API integration via managed OAuth. The SKILL.md exclusively describes calls to maton.ai gateway and ctrl endpoints and how to manage OAuth connections — the required MATON_API_KEY is consistent with this purpose.
✓
Instruction Scope
Runtime instructions are limited to HTTP calls to gateway.maton.ai and ctrl.maton.ai and showing how to create/list/delete connections and call Basecamp endpoints. The instructions do not request unrelated files, environment variables, or system paths, nor do they direct data to unexpected endpoints beyond the documented Maton endpoints.
✓
Install Mechanism
No install spec or code files are present (instruction-only). This is low-risk because nothing is downloaded or written to disk by an installer step.
ℹ
Credentials
Only one required env var (MATON_API_KEY) is declared and used in the instructions — this is proportionate for a proxy/OAuth gateway. Minor note: metadata lists no 'primary credential' even though MATON_API_KEY is the primary secret; this is a bookkeeping/metadata omission rather than a functional mismatch.
✓
Persistence & Privilege
always is false and the skill is user-invocable with normal autonomous invocation allowed. The skill does not request persistent system-wide privileges or modify other skills' configs.
Assessment
This skill appears coherent: it proxies Basecamp API calls through Maton and needs only MATON_API_KEY. Before installing, confirm you trust Maton (maton.ai) because API calls and OAuth tokens will transit/likely be stored/managed by their service. Verify Maton's privacy/security docs and that you are comfortable granting it access to your Basecamp account. Treat MATON_API_KEY like any sensitive API key: do not reuse it elsewhere, rotate or revoke it if compromised, and prefer least-privilege/use an account scoped for this integration. The package has no install step (instruction-only), so risk is limited to network/API trust rather than local code execution. If you need higher assurance, request a verified publisher/homepage or source code provenance from the author before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk9774amrfef4aqrrk5ptq28x2980xe6y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments