Google Classroom

PassAudited by ClawScan on May 1, 2026.

Overview

This is a coherent Google Classroom integration, but it relies on a Maton API key/OAuth connection and can make user-approved changes to Classroom data.

Install this only if you intend to let Maton-mediated OAuth access your Google Classroom account. Keep the API key private, confirm every write operation carefully, specify the intended connection when multiple accounts exist, and revoke the connection when you no longer need it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone who can use the configured API key and connection may be able to access or manage Google Classroom resources for the connected account.

Why it was flagged

The skill requires a Maton API key and managed OAuth access to a Google Classroom account. This is expected for the integration, but it grants delegated account access.

Skill content
All requests require the Maton API key in the Authorization header:

Authorization: Bearer $MATON_API_KEY
Recommendation

Keep the MATON_API_KEY secret, use the Maton-Connection header when multiple accounts exist, and revoke unused OAuth connections.

What this means

Mistaken approvals could create, change, or delete courses, assignments, roster entries, or announcements.

Why it was flagged

The skill exposes write operations against Classroom resources, but it also requires explicit approval before high-impact actions.

Skill content
**All write operations require explicit user approval.** Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Recommendation

Before approving a write action, verify the target course or resource, the intended change, and the account connection being used.

What this means

Course, roster, assignment, announcement, and submission data may pass through Maton's service as part of normal use.

Why it was flagged

Google Classroom API requests and responses are routed through Maton's API gateway, creating a third-party data boundary for classroom information.

Skill content
Base URL

https://api.maton.ai/google-classroom/{api-path}

Manage your Google Classroom OAuth connections at `https://api.maton.ai`.
Recommendation

Use this only if you trust Maton for the relevant Classroom data, and review Maton's account and connection settings periodically.