Gumroad
v1.0.3Gumroad API integration with managed OAuth. Access products, sales, subscribers, licenses, and webhooks for your digital storefront. Use this skill when users want to manage their Gumroad products, verify licenses, view sales data, or set up webhook notifications. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway). Requires network access and valid Maton API key.
⭐ 2· 3.9k·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description match the instructions: all examples call Maton gateway endpoints to access Gumroad resources. The only required item (MATON_API_KEY) is appropriate for a proxied OAuth integration.
Instruction Scope
SKILL.md contains code snippets that make HTTP requests to gateway.maton.ai and ctrl.maton.ai and instruct opening an OAuth URL in a browser. There are no instructions to read local files, other env vars, or exfiltrate data to unrelated endpoints.
Install Mechanism
There is no install spec and no code files beyond SKILL.md (instruction-only), so nothing will be written to disk or fetched during install by the skill itself.
Credentials
The skill only requires MATON_API_KEY which is proportional to the described gateway-based integration. Be aware that using this skill routes Gumroad API traffic (and therefore your Gumroad data) through Maton's services (gateway.maton.ai / ctrl.maton.ai), so you must trust Maton with that access.
Persistence & Privilege
The skill does not request always:true, does not modify other skill configurations, and contains no install-time persistence actions. Autonomous invocation is allowed (platform default) but not combined with elevated privileges.
Assessment
This skill is coherent: it simply tells the agent how to call Maton's Gumroad gateway and needs your MATON_API_KEY. Before installing, confirm you are comfortable routing Gumroad access through Maton (gateway.maton.ai / ctrl.maton.ai), and only provide a key with the minimum privileges you need. Because the skill source/homepage are not provided, verify Maton’s trustworthiness (review Maton's docs or account settings) before giving the API key. Monitor and revoke connections you don't recognize.Like a lobster shell, security has layers — review code before you run it.
latestvk979ceqyw3fdhtd1x8t53m8x1s80x7w2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🧠 Clawdis
EnvMATON_API_KEY
