Google Classroom
PassAudited by VirusTotal on May 12, 2026.
Overview
Type: OpenClaw Skill Name: google-classroom Version: 1.0.3 The skill bundle provides a standard integration for the Google Classroom API via a managed OAuth service (maton.ai). It includes well-documented API endpoints, authentication procedures using an environment variable (MATON_API_KEY), and Python/JavaScript code examples for common tasks like listing courses and creating assignments. No evidence of data exfiltration, malicious execution, or prompt injection was found; the instructions explicitly require user approval for write operations.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone who can use the configured API key and connection may be able to access or manage Google Classroom resources for the connected account.
The skill requires a Maton API key and managed OAuth access to a Google Classroom account. This is expected for the integration, but it grants delegated account access.
All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY
Keep the MATON_API_KEY secret, use the Maton-Connection header when multiple accounts exist, and revoke unused OAuth connections.
Mistaken approvals could create, change, or delete courses, assignments, roster entries, or announcements.
The skill exposes write operations against Classroom resources, but it also requires explicit approval before high-impact actions.
**All write operations require explicit user approval.** Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Before approving a write action, verify the target course or resource, the intended change, and the account connection being used.
Course, roster, assignment, announcement, and submission data may pass through Maton's service as part of normal use.
Google Classroom API requests and responses are routed through Maton's API gateway, creating a third-party data boundary for classroom information.
Base URL
https://api.maton.ai/google-classroom/{api-path}
Manage your Google Classroom OAuth connections at `https://api.maton.ai`.Use this only if you trust Maton for the relevant Classroom data, and review Maton's account and connection settings periodically.