ClawHub

Clockify

v1.0.0

Integrate with Clockify API to track time, and manage projects, clients, tasks, tags, and workspaces using OAuth authentication.

⭐ 0· 636·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (Clockify integration) aligns with the runtime instructions: all examples call Maton-managed endpoints (gateway.maton.ai, ctrl.maton.ai) and require a single MATON_API_KEY. Requesting a Maton API key is proportionate for a proxied OAuth integration.
ℹ
Instruction Scope
SKILL.md only instructs network calls to Maton-controlled endpoints and uses the MATON_API_KEY from environment; it does not ask the agent to read local files or unrelated environment variables. Note: all user Clockify activity is proxied through Maton endpoints (including connection creation/deletion), which is expected but a privacy/trust consideration.
✓
Install Mechanism
Instruction-only skill with no install spec or code files — nothing is written to disk during install and no third-party packages are pulled, which minimizes installation risk.
ℹ
Credentials
Only MATON_API_KEY is required, which is consistent with the described gateway usage. This key is sensitive because it authorizes access via Maton to your Clockify account; the skill does not declare other unrelated secrets.
✓
Persistence & Privilege
always is false and there are no config paths or requests to modify other skills or system settings. Model invocation is allowed (platform default), which is normal for user-invocable skills.
Assessment
This skill routes all Clockify API calls and OAuth through Maton services (gateway.maton.ai, ctrl.maton.ai). Before installing: verify you trust maton.ai (review their privacy/security docs), create and use a scoped/dedicated MATON_API_KEY rather than a high-privilege or reusable secret, confirm what access the Maton key grants to your Clockify data, and monitor/rotate the key if you enable the skill. Because it’s instruction-only there’s no local install risk, but the data flow to Maton is the primary privacy/security consideration.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ane3q2egyzbv69fzasfkwch814vqp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments