ClawHub

GitHub

v1.0.3

GitHub API integration with managed OAuth. Access repositories, issues, pull requests, commits, branches, and users. Use this skill when users want to interact with GitHub repositories, manage issues and PRs, search code, or automate workflows. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

⭐ 41· 14.1k·42 current·46 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description claim GitHub API access; SKILL.md documents using a Maton-managed gateway and explicitly requires MATON_API_KEY. The requested environment variable and the endpoints in the instructions (gateway.maton.ai, ctrl.maton.ai) are consistent with a gateway-based GitHub integration. The repository/source/homepage are missing, but that is a metadata gap rather than an incoherent requirement.
✓
Instruction Scope
Instructions only perform HTTP calls to Maton gateway/controller endpoints and show how to create/list/delete OAuth connections and call proxied GitHub endpoints. They do not instruct reading unrelated files, scanning local paths, or accessing other environment variables beyond MATON_API_KEY. They do require network access and user interaction (open OAuth URL) to complete authorization.
✓
Install Mechanism
No install spec and no code files — the skill is instruction-only. This minimizes disk write/execute risk; nothing is downloaded or installed by the skill itself.
✓
Credentials
Only a single env var (MATON_API_KEY) is required and the SKILL.md shows it is used in Authorization headers to maton.ai endpoints. This is proportionate for a gateway-based integration. Note: maton.ai will hold or mediate OAuth tokens, so trusting that third party is necessary.
✓
Persistence & Privilege
always is false and there is no installation or persistent modification of agent/system state in the instructions. The skill can be invoked autonomously (platform default), which is normal — no elevated or unusual privileges are requested.
Assessment
This skill is coherent: it proxies GitHub API calls through Maton and only needs the MATON_API_KEY. Before installing, confirm you trust maton.ai because OAuth tokens and proxied API traffic will pass through their service; consider using a Maton key with limited scope or a dedicated Maton account. Verify the publisher/source if you require provenance (homepage/source are missing). Also be aware the agent can call the skill autonomously by default; if you want to restrict automated access, disable model invocation or require explicit user approval when installing.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ckr4n9ynvx56zgy70qy8ccs80weqh

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments