ClickSend
ReviewAudited by ClawScan on May 1, 2026.
Overview
The skill is a straightforward ClickSend messaging integration, but it uses a Maton API key and can send messages or change contacts, so users should confirm any write action.
This skill appears coherent and purpose-aligned. Before installing, make sure you trust Maton and ClickSend with the phone numbers, message content, and contact data involved. Keep MATON_API_KEY private, specify the intended ClickSend connection when you have multiple accounts, and approve only clearly described send, create, update, or delete operations.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If used incorrectly, the agent could send messages or make contact/list changes in the connected ClickSend account.
The skill can perform outbound communications and mutate contact/list data, but it discloses this capability and instructs confirmation before write operations.
Send SMS, MMS, and voice messages, manage contacts and lists... **All write operations require explicit user approval.**
Only approve sends, updates, or deletes after checking the recipient, message content, target list/contact, and expected cost or business impact.
Anyone or any agent process with access to the key may be able to use the connected ClickSend capabilities allowed by Maton.
The skill requires a Maton API key that authorizes access to connected ClickSend account operations.
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Store MATON_API_KEY securely, use the least-privileged Maton/ClickSend connection available, and rotate the key if it may have been exposed.
Data sent through the skill is shared with Maton as part of the managed authentication flow, in addition to ClickSend.
Message contents, phone numbers, contact/list data, and account requests are routed through Maton's API gateway before reaching ClickSend.
Maton proxies requests to `rest.clicksend.com` and automatically injects your authentication.
Use this skill only if you trust Maton to handle the relevant messaging and contact data, and avoid sending unnecessary sensitive content.