ClawHub

Brevo

v1.0.2

Brevo API integration with managed OAuth. Email marketing, transactional emails, SMS, contacts, and CRM. Use this skill when users want to send emails, manage contacts, create campaigns, or work with Brevo lists and templates. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.

⭐ 3· 3.5k·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
ℹ
Purpose & Capability
The skill is advertised as a Brevo API integration and all declared requirements (MATON_API_KEY) and runtime examples call Maton gateway endpoints (gateway.maton.ai, ctrl.maton.ai) that proxy to Brevo. There are no unrelated environment variables or binaries required. Note: the package source/homepage is missing (Source: unknown, no homepage), so vendor provenance cannot be independently verified.
✓
Instruction Scope
SKILL.md contains only HTTP request examples to Maton-managed endpoints and uses the single declared env var (MATON_API_KEY). It does not instruct reading local files, scanning shell history, accessing unrelated credentials, or sending data to unknown external endpoints beyond Maton/Brevo. It asks the user to open an OAuth URL in a browser to complete authorization (expected for OAuth flows).
✓
Install Mechanism
No install spec and no code files — this is an instruction-only skill. That minimizes on-disk installs or execution of arbitrary downloaded code.
✓
Credentials
Only MATON_API_KEY is required and that key is used consistently in examples and headers. The number and type of credentials requested are proportionate to the stated purpose (proxy/OAuth integration).
✓
Persistence & Privilege
always is false and the skill does not request system-wide persistence or modifications to other skills. disable-model-invocation is false (normal). Nothing in the SKILL.md indicates it will alter other skill configs or gain elevated persistent privileges.
Scan Findings in Context
[no_findings] expected: The static regex scanner had nothing to analyze because this is an instruction-only skill (no code files). That absence of findings does not prove safety; review of SKILL.md is the primary signal.
Assessment
This skill appears coherent for using Brevo via Maton (you provide a MATON_API_KEY and the skill calls Maton endpoints). Before installing: verify that you trust maton.ai/ctrl.maton.ai/gateway.maton.ai (publisher/homepage missing here), limit the API key scope and rotate it if possible, avoid sharing the key in chat, and monitor activity for unexpected requests. If you need direct Brevo access without a proxy, consider using a verified direct-Brevo integration or the platform's official api-gateway skill instead. If you have doubts about the unknown publisher, request provenance or a canonical homepage before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97czs7nkvmch3f72e795dbxe980x1st

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments