Granola

• Analyzed: May 11, 2026, 4:40 AM
• Findings: 1
• Version: 1.0.2
• Hash: 4e813092ecbd220b72c6e9aa8223793e67644ee32f0af1b3372876af81056ba5
• Source: palm
• External report: View on VirusTotal

Findings (1)

The granola-api skill is a legitimate integration for accessing Granola meeting notes and transcripts via the Maton API gateway (api.maton.ai). The skill uses standard Model Context Protocol (MCP) patterns, requires a user-provided MATON_API_KEY for authentication, and includes explicit instructions for the agent to seek user approval for write operations. No evidence of malicious intent, data exfiltration to unauthorized endpoints, or obfuscated code was found in SKILL.md or the associated JSON schemas.