CallRail
v1.0.1CallRail API integration with managed OAuth. Track and analyze phone calls, manage tracking numbers, companies, and tags. Use this skill when users want to access call data, manage tracking numbers, view call analytics, or organize calls with tags. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
⭐ 3· 3.4k·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The skill advertises a CallRail integration via a managed OAuth gateway (Maton). Requesting MATON_API_KEY and calling gateway.maton.ai / ctrl.maton.ai is consistent with that design. There are no unrelated credentials or binaries requested.
Instruction Scope
SKILL.md contains only examples that call Maton gateway/control endpoints and instruct the user to open the provided oauth URL in a browser. The instructions do not ask the agent to read local files, unrelated env vars, or transmit data to unexpected endpoints.
Install Mechanism
Instruction-only skill with no install spec and no code files, so nothing is written to disk or fetched at install time. This is the lowest-risk install posture.
Credentials
Only one env var (MATON_API_KEY) is required, which is appropriate for a managed OAuth gateway. Note that this is a gateway key (Maton) not a native CallRail key — the gateway will see proxied request data, so granting the key gives Maton access to calls/metadata.
Persistence & Privilege
The skill is not marked always:true and does not request persistent system-level privileges. Model invocation is enabled (default), which is normal for skills; nothing in the files indicates modification of other skills or agent-wide configuration.
Assessment
This skill appears to do what it says: it proxies CallRail API calls through Maton and requires a Maton API key. Before installing, confirm you trust maton.ai/ctrl.maton.ai: the gateway will see request and call data (including any call metadata or recordings you request). Use a dedicated MATON_API_KEY with minimal permissions, rotate the key after use, and avoid reusing the key across unrelated agents. Because the skill's source and homepage are not provided, consider verifying the publisher (owner ID) and checking Maton's documentation or support channels. If you need to limit autonomous agent activity, avoid providing MATON_API_KEY to the agent or restrict model/skill invocation in your agent settings.Like a lobster shell, security has layers — review code before you run it.
latestvk973v4x84f47hsm37w157bkk2x80wnn2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY