Gmail
ReviewAudited by ClawScan on May 7, 2026.
Overview
This is a coherent Gmail integration, but it needs a Maton API key/OAuth connection and can access or change Gmail data, so users should only install it if they trust Maton and approve write actions.
Before installing, confirm that you trust Maton with access to the selected Gmail account. Use the correct connection ID if you have multiple accounts, review OAuth permissions, and require explicit confirmation before the agent sends, updates, creates, or deletes anything in Gmail.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If authorized, the agent can access sensitive Gmail data and may send or manage mail when directed.
This confirms the skill will operate under a connected Gmail identity with authority over sensitive mailbox content and email-sending features.
Access the Gmail API with managed OAuth authentication. Read, send, and manage emails, threads, labels, and drafts.
Install only if you trust Maton with Gmail access, connect the intended account, and review the OAuth permissions before approving.
Mistaken or unauthorized write actions could send emails, alter drafts, labels, or other mailbox resources.
The documentation acknowledges write-capable Gmail operations and sets an approval requirement, which is appropriate but still important because email mutations can have real impact.
**All write operations require explicit user approval.** Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Require the agent to show the exact message, draft, label, or thread and the intended change before approving any write operation.
Email data and Gmail operations may pass through Maton's infrastructure rather than going directly from the agent to Google.
Gmail API requests are routed through Maton's gateway, meaning mailbox data and OAuth-backed operations depend on that third-party proxy.
https://api.maton.ai/google-mail/{native-api-path} ... Maton proxies requests to `gmail.googleapis.com` and automatically injects your OAuth token.Use this skill only if you trust Maton's handling of Gmail data and account authorization; disconnect the OAuth connection when no longer needed.
Using the optional CLI requires trusting the Maton CLI distribution from npm or Homebrew.
The skill is instruction-only, but its setup examples rely on installing an external CLI package that was not included in the scanned artifacts.
npm install -g @maton-ai/cli ... brew install maton-ai/cli/maton
Verify the package source and install only from the official Maton-maintained channel if you choose to use the CLI.