ClawHub

Google Forms

v1.0.5

Google Forms API integration with managed OAuth. Create forms, add questions, and retrieve responses. Use this skill when users want to interact with Google Forms. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

⭐ 5· 4.3k·3 current·3 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
✓
Purpose & Capability
Name/description, examples, and required env var (MATON_API_KEY) consistently describe a Maton-managed OAuth gateway for Google Forms. The requested API key is expected for a gateway/proxy integration.
✓
Instruction Scope
SKILL.md only instructs calls to gateway.maton.ai and ctrl.maton.ai (and connect.maton.ai) using MATON_API_KEY; it does not ask the agent to read unrelated files, other env vars, or system paths. Examples are concrete and limited to the stated API surface.
✓
Install Mechanism
Instruction-only skill with no install spec or code files (lowest install risk). Nothing is downloaded or written to disk by the skill itself.
ℹ
Credentials
Only MATON_API_KEY is required which matches the gateway-based design. However this single key is powerful — it allows the maton.ai gateway to act on behalf of the user's Google connections, so it is a high-sensitivity secret and should be treated accordingly.
✓
Persistence & Privilege
always=false and no special privileges requested. The skill can be invoked autonomously (platform default) but that is not, on its own, a red flag here.
What to consider before installing
This skill appears internally consistent: it uses a Maton API gateway to proxy Google Forms requests and only needs MATON_API_KEY. Before installing, verify the Maton service and publisher because the skill's 'Source' and 'Homepage' are missing — the gateway operator (maton.ai) will be able to access OAuth connections and form data when you use this skill. If you proceed: (1) only provide a Maton API key tied to an account you trust, (2) use least-privilege or scoped credentials if available, (3) review Maton’s privacy/security docs and the OAuth connection URLs returned by the service, (4) rotate/revoke the key if you stop using the skill, and (5) avoid supplying other unrelated secrets. If you want stronger assurance, request publisher identity or a link to a project/homepage before enabling this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk977wmt3k6cp1fq3cwgwpfs14180wr4f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments