ClawHub

Lemlist

v1.0.0

Lemlist API integration with managed OAuth. Sales automation and cold outreach platform. Use this skill when users want to manage campaigns, leads, activities, schedules, or unsubscribes in Lemlist. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).

⭐ 2· 1.2k·0 current·0 all-time
by@byungkyu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description say it's a Lemlist integration using managed OAuth. The only required environment variable is MATON_API_KEY, which matches the SKILL.md examples that call Maton endpoints (gateway.maton.ai and ctrl.maton.ai). No unrelated binaries or credentials are requested, so the declared requirements are proportionate to the stated purpose.
ℹ
Instruction Scope
The runtime instructions are limited to calling Maton-managed endpoints (gateway.maton.ai and ctrl.maton.ai) and using MATON_API_KEY; they do not instruct reading arbitrary local files or other environment variables. Important caveat: all API traffic is proxied through Maton, so Maton will receive request/response data and manage the OAuth tokens — that is expected for this design but is a meaningful data-flow consideration the user must accept.
✓
Install Mechanism
There is no install spec and no code files to be written or executed on disk (instruction-only). This minimizes install-time risk.
✓
Credentials
Only one env var (MATON_API_KEY) is required and is used consistently in examples. This single credential is reasonable for a gateway/proxy design. Note: the skill metadata doesn't mark a 'primary' credential even though MATON_API_KEY is effectively the main secret — minor metadata mismatch but not a functional problem. The key grants Maton-wide access to proxied Lemlist operations, so it should be treated as a high-value secret.
✓
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It does not declare any persistent system-wide changes or modifications to other skills' configuration.
Assessment
This skill is coherent and appears to do what it says, but it routes all Lemlist operations through Maton's gateway. Before installing: confirm you trust maton.ai (no homepage/source repo is provided in the registry metadata), treat MATON_API_KEY as a high-privilege secret (store it securely and rotate if needed), review Maton's privacy/security docs to understand token storage and access, and consider whether you prefer giving direct Lemlist API credentials to a trusted integration instead of a third-party proxy. If you have concerns, ask the publisher for a source repository or independent documentation and validate the ctrl.maton.ai/gateway.maton.ai endpoints and their privacy/security posture.

Like a lobster shell, security has layers — review code before you run it.

latestvk976hzjrfefszfagsbzwwtkbf1811c71

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🧠 Clawdis
EnvMATON_API_KEY

Comments