Google Tag Manager

• Analyzed: May 7, 2026, 10:16 AM
• Findings: 0
• Version: 1.0.0
• Hash: 7280cde06814be9d00cd3e311da2809e8b91927fd797cb77dc22a881c920ded5
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: google-tag-manager-api Version: 1.0.0 The skill provides a legitimate integration for the Google Tag Manager API via a proxy service (api.maton.ai). It includes well-documented Python examples for managing GTM resources and explicitly instructs the AI agent to seek user approval before performing write operations or publishing changes. No evidence of malicious intent, data exfiltration, or unauthorized execution was found in SKILL.md or _meta.json.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ASI02: Tool Misuse and Exploitation

Note

What this means

If used incorrectly, the agent could change analytics or marketing tags and potentially publish changes to a live site.

Why it was flagged

The skill is intended to perform broad GTM management, including actions that can change tags, triggers, variables, and published container versions.

Skill content

Manage GTM accounts, containers, workspaces, tags, triggers, variables, environments, and container versions.

Recommendation

Confirm the exact GTM account, container, workspace, resource, and intended effect before any write or publish action.

ASI03: Identity and Privilege Abuse

Note

What this means

Anyone or any agent with this API key and connection access may be able to act within the connected GTM permissions.

Why it was flagged

The skill requires a Maton API key and uses the connected Google account’s GTM permissions, which is expected for this integration but is sensitive account authority.

Skill content

All requests require the Maton API key in the Authorization header: Authorization: Bearer $MATON_API_KEY

Recommendation

Store MATON_API_KEY securely, avoid sharing it in chats or logs, and revoke or rotate it if exposed.

ASI07: Insecure Inter-Agent Communication

Note

What this means

GTM request details pass through Maton’s service, so users must trust Maton’s handling of OAuth-mediated access and API traffic.

Why it was flagged

Requests to Google Tag Manager are routed through the Maton gateway, which is disclosed and purpose-aligned but means GTM API traffic depends on a third-party proxy.

Skill content

Maton proxies requests to `tagmanager.googleapis.com` and automatically injects your OAuth token.

Recommendation

Use this skill only if you trust Maton for managed OAuth, and review active connections regularly.