Google Docs

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: google-docs Version: 1.0.7 The google-docs skill provides a standard integration for managing Google Documents via the Maton API proxy service (api.maton.ai). It utilizes a managed OAuth flow and requires a MATON_API_KEY for authentication. The SKILL.md file contains legitimate API documentation, CLI usage examples, and code snippets (Python/JavaScript) for document creation and editing, and it explicitly instructs the AI agent to seek user approval before performing write operations.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If the API key or OAuth connection is misused, someone could access or modify Google Docs content available to the connected account.

Why it was flagged

The skill relies on delegated Google OAuth access through Maton, which is expected for this integration but gives the service authority to act on the connected Google Docs account.

Skill content
Maton proxies requests to `docs.googleapis.com` and automatically injects your OAuth token.
Recommendation

Use only trusted Maton accounts, protect MATON_API_KEY, specify the intended connection when multiple accounts exist, and revoke connections that are no longer needed.

What this means

Accidental or misunderstood approvals could create, change, or delete Google Docs-related resources.

Why it was flagged

The skill can perform document-changing actions, but it also includes a clear approval requirement for high-impact writes.

Skill content
**All write operations require explicit user approval.** Before executing any create, update, or delete call, confirm the target resource and intended effect with the user.
Recommendation

Before approving any write action, verify the document ID, account connection, and exact change being requested.

What this means

Sensitive document content or metadata may pass through Maton's infrastructure as part of normal use.

Why it was flagged

Google Docs requests are routed through the Maton API gateway, so document requests and responses may transit a third-party service.

Skill content
Base URL

```
https://api.maton.ai/google-docs/{native-api-path}
```
Recommendation

Only use this skill with documents and Google accounts you are comfortable routing through Maton, and review Maton's privacy and security practices if handling sensitive content.