Google BigQuery
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is a clearly disclosed BigQuery integration, but users should understand it grants a third-party OAuth proxy access to query and manage BigQuery resources.
Before installing, confirm you trust Maton to broker OAuth access to BigQuery, connect only the intended Google account or project, and review all SQL and write operations before approving them.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone installing the skill should understand that BigQuery access is mediated through Maton and may allow querying or managing data available to the connected Google account.
The skill relies on Maton-managed OAuth to act against the user's Google BigQuery account, which is expected for the integration but grants delegated account access.
Maton proxies requests to `bigquery.googleapis.com` and automatically injects your OAuth token.
Use a dedicated or least-privileged Google account/connection where possible, and verify the connected project and account before running requests.
Incorrect or unintended queries and management actions could expose, change, or delete BigQuery resources, or incur query costs.
The documented capability includes broad BigQuery operations that can affect datasets, tables, and jobs; this is purpose-aligned, but it is high-impact authority.
Run SQL queries, manage datasets and tables, and analyze data at scale.
Confirm project IDs, dataset/table names, and SQL text before execution; require explicit approval for any write, delete, DDL, or DML operation.
Queries, request metadata, and BigQuery responses may pass through the Maton API gateway as part of normal operation.
Requests are routed through a third-party gateway before reaching Google BigQuery; this is disclosed and central to the managed OAuth design.
Base URL: `https://api.maton.ai/google-bigquery/bigquery/v2/{resource-path}`Review Maton's terms and data-handling practices before connecting sensitive BigQuery projects, and avoid sending data beyond what is needed for the task.
