Basecamp
PassAudited by ClawScan on May 1, 2026.
Overview
This is a coherent Basecamp integration that uses a Maton API key and OAuth proxy; the sensitive account access is disclosed and write actions are instructed to require user approval.
This skill appears appropriate for managing Basecamp through Maton. Before installing, make sure you trust Maton with Basecamp OAuth access, keep MATON_API_KEY private, specify the intended connection when you have multiple accounts, and require clear confirmation before any write or delete operation.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used carelessly, the agent could make meaningful changes to Basecamp content such as projects, tasks, messages, schedules, or documents.
The skill can perform broad Basecamp management actions, which may affect business collaboration data. This is purpose-aligned and disclosed.
Manage projects, to-dos, messages, schedules, documents, and team collaboration.
Review and explicitly approve any create, update, or delete action, especially deletes or changes affecting shared projects.
Anyone or any agent with access to the MATON_API_KEY may be able to interact with the connected Basecamp account through Maton.
The skill requires a sensitive API key that delegates access to the user's managed Basecamp OAuth connection.
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Store the API key securely, avoid sharing it in chat or logs, and revoke or rotate it if exposure is suspected.
Basecamp request and response data may pass through Maton as part of the managed OAuth proxy flow.
The integration routes Basecamp API traffic through a third-party gateway that manages OAuth tokens and account IDs.
Maton proxies requests to `3.basecampapi.com/{account_id}/` and automatically injects your OAuth token and account ID.Use this only if you trust Maton to handle the connected Basecamp account data and review Maton's security and privacy practices.