Google Tasks
v1.0.3Google Tasks API integration with managed OAuth. Manage task lists and tasks with full CRUD operations. Use this skill when users want to read, create, update, or delete tasks and task lists in Google Tasks. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
⭐ 9· 5.7k·4 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the runtime instructions: all examples call Maton gateway endpoints (gateway.maton.ai / ctrl.maton.ai / connect.maton.ai) to manage Google Tasks via managed OAuth. The requested MATON_API_KEY is coherent with a gateway-based integration.
Instruction Scope
Instructions are narrowly scoped to issuing HTTPS requests to Maton gateway/control endpoints and to opening the returned OAuth URL in a browser. They do not instruct reading local files, other env vars, or transmitting unrelated data. Note: the skill requires you to visit an external connect.maton.ai URL to complete OAuth, so you must trust that external site before granting access to Google accounts.
Install Mechanism
No install spec and no code files are executed on the host—this is instruction-only, which minimizes disk-write risk.
Credentials
Only one env var is required (MATON_API_KEY), which is proportional to the described gateway-based integration. Minor metadata inconsistency: the registry lists no primary credential while the SKILL.md explicitly requires MATON_API_KEY; this is likely a documentation/metadata oversight but not a functional mismatch. The MATON_API_KEY is a sensitive bearer token and grants access to the user's managed OAuth connections, so it must be protected.
Persistence & Privilege
always is false and there is no install; the skill does not request persistent system presence or elevated privileges.
Assessment
This skill appears to do what it claims, but you should only install it if you trust maton.ai and the Maton gateway operators. Before using: (1) Treat MATON_API_KEY like a secret—do not share it. (2) Verify the OAuth URL (connect.maton.ai) is legitimate before authorizing access to your Google account. (3) If you require stricter control over tokens/OAuth, consider using an official Google integration you manage directly (or your own API gateway) instead of delegating OAuth to a third-party gateway. (4) Note the small metadata inconsistency: MATON_API_KEY is required but not marked as the primary credential in registry metadata—this is likely harmless but worth noting.Like a lobster shell, security has layers — review code before you run it.
latestvk97cmpm3spmq52zc6dy9nnyf6h80wvtr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY
